Trust in semver

[turadg]

Will reduce duplication in node_modules when it already has newer versions of these dependencies.

Fixes #122

#164 does the same for react deps

[vbuch]

This should go in. Currently npm reports what I've included below. Issues like that could get resolved by this PR.

Moderate        Regular Expression Denial of Service
Package         underscore.string
Patched in      >=3.3.5
Dependency of   flow-coverage-report [dev]
Path            flow-coverage-report > badge-up > svgo > js-yaml > argparse
                  > underscore.string
More info       https://nodesecurity.io/advisories/745

found 1 moderate severity vulnerability in 22218 scanned packages
  1 vulnerability requires manual review. See the full report for details.

Well, not sure if the PR will fix this specific one, but similar issues...

[turadg]

I'm closing this PR because I don't think it will be merged and I'd like it out of my /pulls list. At Quizlet we've switched from Flow to TypeScript.