Lock NPM Packages

[shannonwells]

Pin package.lock dependencies to exact versions, i.e. remove any "~" or "^" in front of versions.

[shannonwells]

Meeting notes: also update dependabot recommendations