fix: Replace update notifier with simplified deps (#2033)

Closes #1961
Closes #2028

- Fixes security issue with got (CVE-2022-33987)
- Replace update-notifier with simple-update-notifier which does the same thing but has one dependency (semver) rather than several
- Same caching settings as update-notifier

Congratulations and thanks to @alexbrazier 👏 🥇 ❤️

Author: alexbrazier

bin/nodemon.js

@@ -12,5 +12,5 @@ const fs = require('fs');
 const pkg = JSON.parse(fs.readFileSync(__dirname + '/../package.json'));
 
 if (pkg.version.indexOf('0.0.0') !== 0 && options.noUpdateNotifier !== true) {
-  require('update-notifier')({ pkg }).notify();
+  require('simple-update-notifier')({ pkg });
 }

package-lock.json

@@ -63,10 +63,10 @@
     "minimatch": "^3.0.4",
     "pstree.remy": "^1.1.8",
     "semver": "^5.7.1",
+    "simple-update-notifier": "^1.0.7",
     "supports-color": "^5.5.0",
     "touch": "^3.1.0",
-    "undefsafe": "^2.0.5",
-    "update-notifier": "^5.1.0"
+    "undefsafe": "^2.0.5"
   },
   "version": "0.0.0-development",
   "funding": {