Tests report that they have all passed, though there were some peculiarities in both the master branch and my own branch regarding timeouts which never closed the browser. Maybe I was doing something wrong.

There is one remaining high severity vulnerability in the trim package:

┌──────────────────────────────────────────────────────────────────────────────┐
│ Manual Review │
│ Some vulnerabilities require your attention to resolve │
│ │
│ Visit https://go.npm.me/audit-guide for additional guidance │
└──────────────────────────────────────────────────────────────────────────────┘
┌───────────────┬──────────────────────────────────────────────────────────────┐
│ High │ Regular Expression Denial of Service in trim │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ trim │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=0.0.3 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ hallmark [dev] │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ hallmark > remark > remark-parse > trim │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://npmjs.com/advisories/1700 │
└───────────────┴──────────────────────────────────────────────────────────────┘

Also did a standard --fix to fix the usage of vars, as it had linting errors after bumping the deps.

though there were some peculiarities in both the master branch and my own branch regarding timeouts which never closed the browser

This is expected, the tests verify that when a timeout occurs, it is handled correctly. The test output can be confusing at times, when it mixes in browser test results that are expected to contain failures.

Currently it seems like it is installing two versions of browserify, would be grate to get this updated to 17