Update dependencies and move from yarn to npm

[domenic]

Notably, we can remove minipass-fetch in favor of Node.js's built-in fetch, and mocha in favor of Node.js's built-in test runner.