cross-spawn has a [vulnerability](https://github.com/advisories/GHSA-3xgq-45jj-v275). bump to the latest version.