- use npmFileMap from npm tarball if present
- filter out malicious paths from filemap
- clean up some code
Merge remote-tracking branch 'upstream/master'

* upstream/master: (682 commits)
  add keyword for foundation-essential
  Adding gumby
  add reveal.js v2.6.2
  Add nanoscroller 0.8.0
  Add Hammer.js 1.0.10
  Add TypeScript 1.0.0
  Add Sass 0.3.0
  Add Jade 1.3.1
  Add marked 0.3.2
  Updated packages via auto-update.js
  Manually update d3 to 3.4.6
  Updated packages via auto-update.js
  Updated packages via auto-update.js
  Updated packages via auto-update.js
  Updated packages via auto-update.js
  Adding minicart.js 3.0.5
  Updated packages via auto-update.js
  Unify old codemirror versions with add ons - no version change
  Adding Bootstrap RTL CSS files
  * Added NPM auto-update configuration to package.json
  ...

Conflicts:
	auto-update.js
add hipchat notifications for evil npms
rebased with latest
refactor code to be more testable
more cleanup for tests
add a few tests, need more
add autosize.js v1.18.4/1.18.6/1.18.7
reindent package.json in autosize.js
update meta data of autosize.js
Sizzle 1.10.19
Updated Jasny Bootstrap to v3.1.2
Set css as default file package.json
Added parallax v1.0.0
Added versions 1.1.0 and 1.1.1
Mithril v0.1.9 - version upgrade
Merge remote-tracking branch 'upstream/master'

Conflicts:
	ajax/libs/mithril/package.json
add backbone-forms v0.13.0/v0.14.0
The following libs were updated:
   condition, hydra.js, leaflet.markercluster, loglevel, mithril, pixi.js, zeroclipboard

They were verified as fully matching contents of cdnjs in npm version and individual files were compared with md5 to show only whitespace differences.
The following libs were updated:
   cookies-js, accounting, jquery-autosize, bespoke, cannon, idb-wrapper, lunr, numeral, scriptjs, stompjs

Fetched npm names from project's github repos and converted using the usual method
fix
testing