Fix npm package security warnings

[mikemitchel]

To repeat:

clone testee
npm install
npm i --package-lock-only      <-- required to run `npm audit`
npm audit

packages with security warnings:

mocha (high)
launchpad
miner (high)
qunitjs
babel-plugin-istanbul

full npm audit report:
npm audit.txt

related issues:
#177
#175
#164
#152

PRs:
#155