Add exclusion to npm audit list

[JoPintoPaul]

@kyle-bowden Annoyingly, I think the npm audit updates do also trigger a new library version, so will need CHANGELOG and version updating.