Update syntax-error dep

See https://nodesecurity.io/advisories/syntax-error-potential-script-injection