fix: package.json & package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ASYNC-2441827

README.md

@@ -86,5 +86,7 @@ module.exports = {
 ```
 
 #### Running the test suite
-
-Please [see this]](./docs/contributing.md#run-the-regression-test-suite).
+The test suite currently only consists of JSON-parsing unit tests.  A full end-to-end sip test suite should be added.
+```
+npm test
+```

docs/contributing.md

@@ -89,9 +89,7 @@ f80adda48eb5   jambonz/webhook-test-scaffold:latest            "/entrypoint.sh"
 
 #### Run the regression test suite
 
-The test suite has a dependency that the mysql client is installed on your laptop/machine where the test will be run.  This is needed in order to seed the mysql database that is running in the docker network.
-
-Assuming you have installed the mysql client, and done the above steps, you should now be able to run the tests:
+At this point you should be able to run the tests:
 
 ```bash
 ./run-tests.sh

lib/tasks/gather.js

@@ -349,9 +349,7 @@ class TaskGather extends Task {
     }
     assert(!this._timeoutTimer);
     this.logger.debug(`Gather:_startTimer: timeout ${this.timeout}`);
-    this._timeoutTimer = setTimeout(() => {
-      this._resolve(this.digitBuffer.length >= this.minDigits ? 'dtmf-num-digits' : 'timeout');
-    }, this.timeout);
+    this._timeoutTimer = setTimeout(() => this._resolve('timeout'), this.timeout);
   }
 
   _clearTimer() {

package.json

@@ -50,7 +50,7 @@
     "cidr-matcher": "^2.1.1",
     "debug": "^4.3.2",
     "deepcopy": "^2.1.0",
-    "drachtio-fsmrf": "^2.0.13",
+    "drachtio-fsmrf": "^3.0.0",
     "drachtio-srf": "^4.4.61",
     "express": "^4.17.1",
     "helmet": "^5.0.2",