put sha.js back in the deps
3.4.1
check deps are correct before publish; and that tests pass
3.4.3
merge