NPM: launch-editor: escapeCmdArgs() omits % escaping on Windows

NPM: launch-editor: escapeCmdArgs omits % escaping on Windows vulnerability discovered by ? in WordPress Npm launch-editor versions = 2.14.1...