use david instead of gemnasium

because with david you see version alerts earlier
Merge pull request #27 from robinboehm/patch-1

use david instead of gemnasium