Package updates

[jboler]

• Remove async package that is unused and has a security vulnerability
• Upgrade xml2js package
  • Requires using Object.prototype.hasOwnProperty.call() because xml2js now uses Object.create(null)
• Switch to npm instead of yarn because yarn v1 is getting old
• Added a GitHub action for running lint and unit tests
• Some other minor cleanup