Security: Tmp files readable by other users

[mcandre]

Please patch or replace esformatter so that the npm-run dependency rises to at least v5.0.0. This is important to resolve a security risk:

https://npmjs.com/advisories/310