Update js-yaml dep

See https://nodesecurity.io/advisories/JS-YAML_Deserialization_Code_Execution
Merge pull request #3 from pdehaan/patch-1

Update js-yaml dep