use got to fetch binary (retries on error, follows redirects, etc.)

.github/workflows/publish.yml

@@ -14,7 +14,7 @@ jobs:
         node-version: 12
         registry-url: https://registry.npmjs.org/
     - run: npm ci
-    - run: npm test
+    - run: npm audit && npm test
     - run: npm publish
       env:
         NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/test.yml

@@ -31,6 +31,7 @@ jobs:
     - name: npm install and test
       run: |
         npm ci
+        npm audit
         npm test
     - name: Checkout gohugoio/hugoBasicExample
       uses: actions/checkout@master