introduce package-lock.json (#781)

* initial package-lock

* remove npmrc

* update package-lock

* update typedoc

* remove istanbul; audit fixes

Co-authored-by: joehan <joehanley@google.com>

Author: bkendall