Security vulnerability in package-lock.json

[TScottJ]

Sherman, can you take a look at this:

"The handlebars dependency defined in package-lock.json has a known moderate severity security vulnerability in version range < 4.0.0 and should be updated."

If we're stuck with a specific version, then we can live with it I guess, but if not and if nothing breaks, might as well update.