Fix compliance URL in specs
Use bundle-audit instead of holepicker
Version bump to 1.2.2