Add bundle-audit
Travis config should be YAML