Remove gh urls from dependencies

[achingbrain]

We have two deps that are pointing to gh repos. This can cause people to have problems using this module, like ipfs-shipyard/npm-on-ipfs#117

@hugomrdias if the changes you've made to these modules aren't going to get merged, could you just publish your forks under a different name?

[achingbrain]

Another person encountering the same issue: #1139

[alanshaw]

🙏 yes please!

[alanshaw]

These are both (concat-stream & ndjson) likely to be removed in the async/await refactor