Security vulnerability in child package of package-json@6.5.0 #18