fix(package): update qs for security reasons

potential DoS attack with qs: https://nodesecurity.io/advisories/qs_dos_extended_event_loop_blocking