Do not allow removal of dist-tags
star fields must be booleans

Re npm/security#7
Ensure that indexOf is called on arrays

Re npm/security#6