CI: add commit-analyzer to package-lock (#169)

* replace dependency in package-lock that is automatically included by semantic-release

Author: john-u