@semantic-release/git shouldn't be a dependency

[jirihajek]

It should only be a devDependency, right?

[rastorc3v]

For sure, it is a dev dependency. Idk why PR hasn't been merged, but closed. @semantic-release/git and other packages from this owner raise a lot of security warnings because they are listed in the dependencies. @neekey could you please take a look at the PR with fix for that? #19

If you don't maintain this package anymore, please mark it as deprecated or mention that in the docs (readme)