fix: massive dependency upgrade, fixes all production vulnerabilities

package.json

@@ -28,23 +28,23 @@
   ],
   "dependencies": {
     "aws-sign2": "~0.7.0",
-    "aws4": "^1.6.0",
+    "aws4": "^1.8.0",
     "caseless": "~0.12.0",
-    "combined-stream": "~1.0.5",
-    "extend": "~3.0.1",
+    "combined-stream": "~1.0.6",
+    "extend": "~3.0.2",
     "forever-agent": "~0.6.1",
-    "form-data": "~2.3.1",
-    "har-validator": "~5.0.3",
+    "form-data": "~2.3.2",
+    "har-validator": "~5.1.0",
     "http-signature": "~1.2.0",
     "is-typedarray": "~1.0.0",
     "isstream": "~0.1.2",
     "json-stringify-safe": "~5.0.1",
-    "mime-types": "~2.1.17",
+    "mime-types": "~2.1.19",
     "oauth-sign": "~0.9.0",
     "performance-now": "^2.1.0",
-    "qs": "~6.5.1",
-    "safe-buffer": "^5.1.1",
-    "tough-cookie": "~2.3.3",
+    "qs": "~6.5.2",
+    "safe-buffer": "^5.1.2",
+    "tough-cookie": "~2.4.3",
     "tunnel-agent": "^0.6.0",
     "uuid": "^3.3.2"
   },
@@ -60,11 +60,11 @@
     "browserify": "^13.0.1",
     "browserify-istanbul": "^2.0.0",
     "buffer-equal": "^1.0.0",
-    "codecov": "^2.0.2",
-    "coveralls": "^2.11.4",
+    "codecov": "^3.0.4",
+    "coveralls": "^3.0.2",
     "function-bind": "^1.0.2",
     "istanbul": "^0.4.0",
-    "karma": "^1.1.1",
+    "karma": "^3.0.0",
     "karma-browserify": "^5.0.1",
     "karma-cli": "^1.0.0",
     "karma-coverage": "^1.0.0",