Add Node Security Project testing:

- depend on nsp client
- use nsp client in npm test command