Only as an enhancement, include nsp (https://github.com/nodesecurity/nsp) to avoid publishing vulnerable modules on npmjs.org