Stop including vm2 as a dependency

[pvcresin]

Chore summary

spectral-cli is connected to vm2 deep in the dependencies.

• spectral-cli -> proxy-agent -> pac-proxy-agent -> pac-resolver -> degenerator -> vm2

vm2 has security issues and is no longer maintained.

• https://github.com/patriksimek/vm2
• Officials recommend switching to isolated-vm.

Even if the dependent libraries support the update, it may take some time for spectral-cli to reflect the changes. So, is there any way to prevent vm2 from being included as a dependency on the spectral-cli side?

Tasks

• [ ] Stop including vm2 as a dependency

Additional context

[pvcresin]

In the latest version, vm2 was missing from the dependencies. Sorry for the lack of confirmation.