Merge pull request #1127 from rebassjs/dependabot/npm_and_yarn/tar-4.4.15

[Security] Bump tar from 4.4.13 to 4.4.15

Merge pull request #1122 from rebassjs/dependabot/npm_and_yarn/ws-5.2.3

[Security] Bump ws from 5.2.2 to 5.2.3

Merge pull request #1114 from rebassjs/dependabot/npm_and_yarn/socket.io-parser-3.3.2

[Security] Bump socket.io-parser from 3.3.0 to 3.3.2

Merge pull request #1101 from rebassjs/dependabot/npm_and_yarn/devcert-1.1.3

[Security] Bump devcert from 1.1.0 to 1.1.3

Merge pull request #1099 from rebassjs/dependabot/npm_and_yarn/hosted-git-info-2.8.9

[Security] Bump hosted-git-info from 2.8.5 to 2.8.9

Merge pull request #1095 from rebassjs/dependabot/npm_and_yarn/handlebars-4.7.7

[Security] Bump handlebars from 4.7.2 to 4.7.7

Merge pull request #1085 from rebassjs/dependabot/npm_and_yarn/ssri-6.0.2

[Security] Bump ssri from 6.0.1 to 6.0.2

Merge pull request #1080 from rebassjs/dependabot/npm_and_yarn/elliptic-6.5.4