Update package-lock.json to manually fix a reported vulnerability
Update package-lock.json to manually fix a reported vulnerability

The vulnerable package is `serialize-javascript` < 2.1.1 but Dependabot wasn't
able to issue a PR.

cyrus-and/chrome-remote-interface,cyrus-and/chrome-remote-interface