The lockfile was not updated in a while, so npm still thinks node-static should be installed, resulting in a very annoying audit message. This patch fixes that issue.