node-fetch quick-fix

[oliverturner]

This PR specifies the same version of node-fetch for both peer and dev dependencies, providing temporary respite from node-fetch@3 going full ESM

This is a temporary workaround in advance of an update like Esm for realz addressing the issue concretely

Unrelated changes

• Updated karma-webpack to fix incompatibility between its webpack dependency and the package-specified version
• CI was failing because of linting errors that weren't reproducible locally. Updating eslint + plugins and turning off errors for code that wasn't previously considered infringing was a stop-gap measure. The majority of the changes to files are formatting updates resulting from running eslint with the --fix flag.

The final coveralls-related error may be something to do with a Github token per this comment