chore(deps): Get audit-filter working for all packages in monorepo

[jaredhirsch]

Commit message / issue summary

• Add a lint:deps job to the top-level package.json, so lerna can run
  lint:deps in all packages in parallel.

• Also fix today's handlebars vulnerability, so that builds don't fail.

Some of the vulnerabilities are in transitive dependencies, yet the
suggested npm update foo --depth N command sometimes seems to do
nothing. There was a related bug in npm 6.6.0 - 6.11.2, fixed by
npm/cli#239, but perhaps that didn't fix all the
cases? (I was using npm 6.12.0.) As a workaround, I've added audit-filter
exceptions where npm update wasn't able to fix vulnerabilities.

Fixes #2229.

Testing this PR

Pretty simple, really:

1. run npm run lint:deps at top-level in the repo

There's quite a bit of terminal output; as long as it doesn't throw an error, we're good 👍

Click to view sample terminal output

]$ npm run lint:deps

> [email protected] lint:deps /Users/jh/codez/github/mozilla-fxa
> lerna exec --parallel -- npm run lint:deps

lerna notice cli v3.16.4
lerna info versioning independent
lerna info Executing command in 17 packages: "npm run lint:deps"
123done: > [email protected] lint:deps /Users/jh/codez/github/mozilla-fxa/packages/123done
123done: > npm audit --json | audit-filter --nsp-config=.nsprc --audit=-
browserid-verifier: > [email protected] lint:deps /Users/jh/codez/github/mozilla-fxa/packages/browserid-verifier
browserid-verifier: > npm audit --json | audit-filter --nsp-config=.nsprc --audit=-
fxa-auth-db-mysql: > [email protected] lint:deps /Users/jh/codez/github/mozilla-fxa/packages/fxa-auth-db-mysql
fxa-auth-db-mysql: > npm audit --json | audit-filter --nsp-config=.nsprc --audit=-
firefox-fortress: > [email protected] lint:deps /Users/jh/codez/github/mozilla-fxa/packages/fortress
firefox-fortress: > npm audit --json | audit-filter --nsp-config=.nsprc --audit=-
fxa-customs-server: > [email protected] lint:deps /Users/jh/codez/github/mozilla-fxa/packages/fxa-customs-server
fxa-customs-server: > npm audit --json | audit-filter --nsp-config=.nsprc --audit=-
fxa-profile-server: > [email protected] lint:deps /Users/jh/codez/github/mozilla-fxa/packages/fxa-profile-server
fxa-profile-server: > npm audit --json | audit-filter --nsp-config=.nsprc --audit=-
fxa-auth-server: > [email protected] lint:deps /Users/jh/codez/github/mozilla-fxa/packages/fxa-auth-server
fxa-auth-server: > npm audit --json | audit-filter --nsp-config=.nsprc --audit=-
fxa-dev-launcher: > [email protected] lint:deps /Users/jh/codez/github/mozilla-fxa/packages/fxa-dev-launcher
fxa-dev-launcher: > npm audit --json | audit-filter --nsp-config=.nsprc --audit=-
fxa-event-broker: > [email protected] lint:deps /Users/jh/codez/github/mozilla-fxa/packages/fxa-event-broker
fxa-event-broker: > npm audit --json | audit-filter --nsp-config=.nsprc --audit=-
fxa-amplitude-send: > [email protected] lint:deps /Users/jh/codez/github/mozilla-fxa/packages/fxa-amplitude-send
fxa-amplitude-send: > npm audit --json | audit-filter --nsp-config=.nsprc --audit=-
fxa-content-server: > [email protected] lint:deps /Users/jh/codez/github/mozilla-fxa/packages/fxa-content-server
fxa-content-server: > npm audit --json | audit-filter --nsp-config=.nsprc --audit=-
fxa-email-event-proxy: > [email protected] lint:deps /Users/jh/codez/github/mozilla-fxa/packages/fxa-email-event-proxy
fxa-email-event-proxy: > npm audit --json | audit-filter --nsp-config=.nsprc --audit=-
fxa-js-client: > [email protected] lint:deps /Users/jh/codez/github/mozilla-fxa/packages/fxa-js-client
fxa-js-client: > npm audit --json | audit-filter --nsp-config=.nsprc --audit=-
fxa-payments-server: > [email protected] lint:deps /Users/jh/codez/github/mozilla-fxa/packages/fxa-payments-server
fxa-payments-server: > npm audit --json | audit-filter --nsp-config=.nsprc --audit=-
fxa-geodb: > [email protected] lint:deps /Users/jh/codez/github/mozilla-fxa/packages/fxa-geodb
fxa-geodb: > npm audit --json | audit-filter --nsp-config=.nsprc --audit=-
fxa-shared: > [email protected] lint:deps /Users/jh/codez/github/mozilla-fxa/packages/fxa-shared
fxa-shared: > npm audit --json | audit-filter --nsp-config=.nsprc --audit=-
fxa-support-panel: > [email protected] lint:deps /Users/jh/codez/github/mozilla-fxa/packages/fxa-support-panel
fxa-support-panel: > npm audit --json | audit-filter --nsp-config=.nsprc --audit=-
fxa-dev-launcher: No advisories found after filtering.
123done: No advisories found after filtering.
firefox-fortress: No advisories found after filtering.
fxa-amplitude-send: No advisories found after filtering.
browserid-verifier: No advisories found after filtering.
fxa-email-event-proxy: No advisories found after filtering.
fxa-shared: No advisories found after filtering.
fxa-auth-db-mysql: No advisories found after filtering.
fxa-geodb: No advisories found after filtering.
fxa-event-broker: No advisories found after filtering.
fxa-profile-server: No advisories found after filtering.
fxa-customs-server: No advisories found after filtering.
fxa-support-panel: No advisories found after filtering.
fxa-js-client: No advisories found after filtering.
fxa-auth-server: No advisories found after filtering.
fxa-content-server: No advisories found after filtering.
fxa-payments-server: No advisories found after filtering.
lerna success exec Executed command in 17 packages: "npm run lint:deps"

[dannycoates]

👍

[jaredhirsch]

I'm going to wait until the eslint PR lands before landing this one