Update npm packages, and documentation

[BanjoFox]

Add stock security policy Add doc/UPDATE-NPM.md Run npm updates.

[nicholasguyett]

SECURITY.md still has the placeholder "this is where you tell them X" text

[BanjoFox]

Weeeird....

I just clicked the "create default policy" link. Will look later. The more important stuff was the npm/webpack updates anyways.