fix: package.json & package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-AJV-584908

package.json

@@ -193,7 +193,7 @@
     "csscomb": "^4.2.0",
     "diff": "^3.4.0",
     "editorconfig": "^0.15.0",
-    "eslint": "^4.16.0",
+    "eslint": "^5.0.0",
     "event-kit": "^2.4.0",
     "expand-home-dir": "0.0.3",
     "extend": "^3.0.2",
@@ -221,7 +221,7 @@
     "typescript": "^2.6.2",
     "typescript-formatter": "^7.0.0",
     "underscore-plus": "^1.6.6",
-    "universal-analytics": "^0.4.16",
+    "universal-analytics": "^0.4.18",
     "uuid": "^3.1.0",
     "which": "^1.3.0",
     "winston": "^2.4.0",