Enforce 14-day package cooldown and update dependencies (#237)

To proactively mitigate the risk of software supply chain attacks, this
PR introduces a 14-day minimum release age requirement for all npm
packages. This ensures we only install dependencies that have been
vetted by the community over a two-week period.

Summary of Changes

- Configured `.npmrc` with `min-release-age=14` to block the
installation of newly published packages.
- Updated existing dependencies to their latest safe, 14-day-compliant
versions.

Author: AlexJSully

.npmrc

@@ -0,0 +1,3 @@
+# Reduce exposure to npm supply-chain attacks by requiring package
+# versions to be at least 14 days old before installation.
+min-release-age=14