update npm-run-all version to resolve event-stream security issue

[amclin]

Fixes #34

Proposed Changes

• Update npm-run-all dependency to 4.1.5

Background context

• https://nodesecurity.io/advisories/737
• https://arstechnica.com/information-technology/2018/11/hacker-backdoors-widely-used-open-source-software-to-steal-bitcoin/

Where should the reviewer start / What requires special attention?

• package.json
• package-lock.json

How should this be manually tested?

1. run npm install
2. No security alerts should be reported

Questions:

• Does this add new dependencies (node, maven, ant, etc) that must be installed?
  • Yes
• Does this change the commands required to run this project?
  • No
• Are any environmental dependencies or operational support steps (sql commands, config changes, etc) required?
  • No
• Are there any relevant issues besides this one?
  • Remove event-stream dependency mysticatea/npm-run-all#149