gulp audit fix

.npmrc

@@ -0,0 +1,3 @@
+@bubblegroup:registry=https://npm.pkg.github.com
+; restricted by default, but asserting it here to be extra sure
+access=restricted

.nvmrc

@@ -0,0 +1 @@
+16.13.0

CHANGELOG.md

@@ -1,5 +1,8 @@
 # gulp changelog
 
+## 4.0.3
+- initial fork, npm audit fix
+
 ## 4.0.0
 
 ### Task system changes

index.js

@@ -2,8 +2,8 @@
 
 var util = require('util');
 var Undertaker = require('undertaker');
-var vfs = require('vinyl-fs');
-var watch = require('glob-watcher');
+var vfs = require('@bubblegroup/vinyl-fs');
+var watch = require('@bubblegroup/glob-watcher');
 
 function Gulp() {
   Undertaker.call(this);