Both dependencies can be replaced by native Node.js calls. Both dependencies are only used in one test file. Rimraf has some vulnerable dependencies. Proposed fix: see #32