Fix package-lock.json to have acorn as a direct dependency

Fix package-lock.json to have acorn as a direct dependency #12494