Derived security vulnerability from `ip` package through `puppeteer` dependency

Just noticed [Dependabot's security alert](https://github.com/AloisSeckar/WBSC-Scoring/security/dependabot/15) in my project regarding SSRF vulnerability of `ip 1.1.8`. The dependency is being imported through `puppeteer`.

They already have [issue](https://github.com/puppeteer/puppeteer/issues/11884) in there, so I guess they will mitigate it sooner or later, although it looks the `ip` is currently not being developed. But once it is done, a new version of `backstopjs` will be required, so I am opening this to get attention.

Currently it is possible to shift back to version `6.2.2` which depends on older (and also unmaintained) version of `pupetteer`, but this is obviously not the ideal solution.