davepacheco/node-vasync#22 could rip out jsprim dependency