Fix package-lock.json to have acorn as a direct dependency

Fix package-lock.json to have acorn as a direct dependency #9855