default to empty whitelist
add package.json
prove we cannot access node globals
Merge branch 'janl/master'
Change whitespace
Add Apache License (version 2.0)

Closes #3.