Coveralls is vulnerable

[Timothy Gu]

The private repo token is exposed: https://github.com/davidbau/seedrandom/blob/master/.coveralls.yml#L1

Proof of concept: https://coveralls.io/builds/1838552

[David Bau]

Fixed in db8f7c5.