fix(bin): pass { shell: true } as option to spawn (#18)

https://nodejs.org/en/blog/vulnerability/april-2024-security-releases-2

Author: oscard0m

bin/npm-snapshot

@@ -52,11 +52,11 @@ const version = semverUtil.stringifySemver(semver);
 if (!version) error("Could not create a valid version string.");
 
 // Run npm verison without tagging
-const npm = spawn(/^win/.test(process.platform) ? "npm.cmd" : "npm", [
-  "--no-git-tag-version",
-  "version",
-  version,
-]);
+const npm = spawn(
+  /^win/.test(process.platform) ? "npm.cmd" : "npm",
+  ["--no-git-tag-version", "version", version],
+  { shell: true }
+);
 npm.stderr.pipe(process.stderr);
 
 npm.on("close", function (code) {