Resolve NPM vulnerabilities

[angusm]

Probably need to update package version in package.json.
Not a major concern at the moment as no packages are included in code to go live.