fix repository key in package.json
package.json and ChangeLog for 0.2.4
Expose knobs for decay factor and max # violations