filter out dotfiles like .bin

If a module has bin scripts in the `"bin"` field of package.json, npm puts symlinks to the bin scripts in `node_modules/.bin`. This confuses npmlv because there is no `node_modules/.bin/package.json`. This patch excludes dotfiles like `.bin` from the directories checked in `node_modules/`.