Use security vetted NPM and Python packages

They are from Georgia Tech https://twitter.com/codinghorror/status/1255975503057440768