fix: client/package.json & client/yarn.lock to reduce vulnerabilities