- use npmFileMap from npm tarball if present
- filter out malicious paths from filemap
- clean up some code
Merge remote-tracking branch 'upstream/master'

* upstream/master: (682 commits)
  add keyword for foundation-essential
  Adding gumby
  add reveal.js v2.6.2
  Add nanoscroller 0.8.0
  Add Hammer.js 1.0.10
  Add TypeScript 1.0.0
  Add Sass 0.3.0
  Add Jade 1.3.1
  Add marked 0.3.2
  Updated packages via auto-update.js
  Manually update d3 to 3.4.6
  Updated packages via auto-update.js
  Updated packages via auto-update.js
  Updated packages via auto-update.js
  Updated packages via auto-update.js
  Adding minicart.js 3.0.5
  Updated packages via auto-update.js
  Unify old codemirror versions with add ons - no version change
  Adding Bootstrap RTL CSS files
  * Added NPM auto-update configuration to package.json
  ...

Conflicts:
	auto-update.js
add hipchat notifications for evil npms
rebased with latest
refactor code to be more testable
more cleanup for tests
add a few tests, need more
disabled grabbing npmFileMap from other package json files (for now)

made the script copy files into a temp dir and then move to /ajax/libs/* which makes it work better see #3036
merged
Thank you @mkoryak -> https://github.com/cdnjs/cdnjs/pull/3009/