Add Advisory for GHSA-h9rv-jmmf-4pgx | CVE-2019-16769 to NPM

[David Robinson]

Hi,
I got a notification on a project for
GHSA-h9rv-jmmf-4pgx
however it doesn't show up as a vulnerability on a npm/yarn audit call.
Is there something you guys need to still do for this? I can see that 2.1.1 is available.

[Ryuichi Okumura]

npm security advisory is published. Thanks!
https://www.npmjs.com/advisories/1426