Pin lockfile in .npmrc

[ferferga]

This is an attempt to fix dependabot updates messing with the lockfile version 3.

Right now, npm 8 will generate an v2 lockfile if an user wants to regen their lockfile or issues an npm i --package-lock-only. In order to match this repo's v3, the --lockfile-version 3 argument must be used. This PR adds that config to .npmrc file, essentially fixing this for everybody transparently, without the need to add any additional CLI arguments.

Also, I bumped the minimum npm and nodejs version, as npm 8.1.0 had an issue where numbers where treated as strings, which was fixed in npm 8.1.2 (which is included in nodejs 16.13.1)

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication

[codecov]

Codecov Report

Merging #1633 (b324d2b) into master (1b9e7da) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master    #1633   +/-   ##
=======================================
  Coverage   53.46%   53.46%           
=======================================
  Files          24       24           
  Lines         881      881           
  Branches      155      155           
=======================================
  Hits          471      471           
  Misses        402      402           
  Partials        8        8           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 1b9e7da...b324d2b. Read the comment docs.