diff --git a/package.json b/package.json
index 7c94411..830b4cb 100644
--- a/package.json
+++ b/package.json
@@ -22,30 +22,30 @@
   ],
   "license": "MIT",
   "dependencies": {
-    "accepts": "^1.2.2",
+    "accepts": "^1.3.5",
     "cache-content-type": "^1.0.0",
-    "content-disposition": "~0.5.0",
-    "content-type": "^1.0.0",
-    "cookies": "~0.7.0",
-    "debug": "*",
+    "content-disposition": "~0.5.2",
+    "content-type": "^1.0.4",
+    "cookies": "~0.7.1",
+    "debug": "^3.1.0",
     "delegates": "^1.0.0",
-    "depd": "^1.1.0",
-    "destroy": "^1.0.3",
-    "error-inject": "~1.0.0",
-    "escape-html": "~1.0.1",
-    "fresh": "^0.5.2",
-    "http-assert": "^1.1.0",
-    "http-errors": "^1.2.8",
-    "is-generator-function": "^1.0.3",
-    "koa-compose": "^4.0.0",
+    "depd": "^1.1.2",
+    "destroy": "^1.0.4",
+    "error-inject": "^1.0.0",
+    "escape-html": "^1.0.3",
+    "fresh": "~0.5.2",
+    "http-assert": "^1.3.0",
+    "http-errors": "^1.6.3",
+    "is-generator-function": "^1.0.7",
+    "koa-compose": "^4.1.0",
     "koa-convert": "^1.2.0",
     "koa-is-json": "^1.0.0",
-    "on-finished": "^2.1.0",
-    "only": "0.0.2",
-    "parseurl": "^1.3.0",
-    "statuses": "^1.2.0",
-    "type-is": "^1.5.5",
-    "vary": "^1.0.0"
+    "on-finished": "^2.3.0",
+    "only": "~0.0.2",
+    "parseurl": "^1.3.2",
+    "statuses": "^1.5.0",
+    "type-is": "^1.6.16",
+    "vary": "^1.1.2"
   },
   "devDependencies": {
     "eslint": "^3.17.1",
@@ -54,7 +54,7 @@
     "eslint-plugin-promise": "^3.5.0",
     "eslint-plugin-standard": "^2.1.1",
     "jest": "^20.0.0",
-    "supertest": "^3.0.0"
+    "supertest": "^3.1.0"
   },
   "engines": {
     "node": "^4.8.4 || ^6.10.1 || ^7.10.1 || >= 8.1.4"