Loosen dependency ranges

Currently you pin every dependency to patches which delays propagation of fixes. It's especially problematic for security fixes such as `node-fetch@2.6.1`.

I understand that this is sometimes necessary for packages that are not following SemVer very strictly. But this wouldn't apply to all dependencies. How are exact dependency versions improving this package?

Review the repository's dependency declarations, starting with the exact-pinned node-fetch entry and other dependencies. Identify which packages can use broader SemVer ranges while preserving exceptions for packages that need exact versions; done means security and bug-fix updates can propagate without breaking installation.

Written by the indexing model from the issue text.