- use npmFileMap from npm tarball if present
- filter out malicious paths from filemap
- clean up some code
Merge remote-tracking branch 'upstream/master'

* upstream/master: (682 commits)
  add keyword for foundation-essential
  Adding gumby
  add reveal.js v2.6.2
  Add nanoscroller 0.8.0
  Add Hammer.js 1.0.10
  Add TypeScript 1.0.0
  Add Sass 0.3.0
  Add Jade 1.3.1
  Add marked 0.3.2
  Updated packages via auto-update.js
  Manually update d3 to 3.4.6
  Updated packages via auto-update.js
  Updated packages via auto-update.js
  Updated packages via auto-update.js
  Updated packages via auto-update.js
  Adding minicart.js 3.0.5
  Updated packages via auto-update.js
  Unify old codemirror versions with add ons - no version change
  Adding Bootstrap RTL CSS files
  * Added NPM auto-update configuration to package.json
  ...

Conflicts:
	auto-update.js
add hipchat notifications for evil npms
rebased with latest
refactor code to be more testable
more cleanup for tests
add a few tests, need more
add autosize.js v1.18.4/1.18.6/1.18.7
reindent package.json in autosize.js
update meta data of autosize.js
Sizzle 1.10.19
Updated Jasny Bootstrap to v3.1.2
Set css as default file package.json
Added parallax v1.0.0
Added versions 1.1.0 and 1.1.1
blah
herbivoce
a milli
fixed
i say some naught
asd
A