Dependance on vulnerable version of "debug"

[niklasholm]

Not a big deal, but yarn audit complains about it and this is supposed to be a security package, looks bad.

https://www.npmjs.com/advisories/534

[briveramelo]

I just added a pull request for this @may215: #3

Seeing this same issue with npm audit