- use npmFileMap from npm tarball if present
- filter out malicious paths from filemap
- clean up some code
Merge remote-tracking branch 'upstream/master'

* upstream/master: (682 commits)
  add keyword for foundation-essential
  Adding gumby
  add reveal.js v2.6.2
  Add nanoscroller 0.8.0
  Add Hammer.js 1.0.10
  Add TypeScript 1.0.0
  Add Sass 0.3.0
  Add Jade 1.3.1
  Add marked 0.3.2
  Updated packages via auto-update.js
  Manually update d3 to 3.4.6
  Updated packages via auto-update.js
  Updated packages via auto-update.js
  Updated packages via auto-update.js
  Updated packages via auto-update.js
  Adding minicart.js 3.0.5
  Updated packages via auto-update.js
  Unify old codemirror versions with add ons - no version change
  Adding Bootstrap RTL CSS files
  * Added NPM auto-update configuration to package.json
  ...

Conflicts:
	auto-update.js
add hipchat notifications for evil npms
rebased with latest
refactor code to be more testable
Adding npm info to minicart package.json
more cleanup for tests
add a few tests, need more
Sizzle 1.10.19
Updating bootstrap-rtl to v3.1.1-rc2
Update Bootstrap-rtl CDNJS version to 3.1.1.
The following libs were updated:
   condition, hydra.js, leaflet.markercluster, loglevel, mithril, pixi.js, zeroclipboard

They were verified as fully matching contents of cdnjs in npm version and individual files were compared with md5 to show only whitespace differences.
The following libs were updated:
   cookies-js, accounting, jquery-autosize, bespoke, cannon, idb-wrapper, lunr, numeral, scriptjs, stompjs

Fetched npm names from project's github repos and converted using the usual method
fixing js tree
Merge branch 'master' of github.com:cdnjs/cdnjs
add snowstorm 20131208
disabled grabbing npmFileMap from other package json files (for now)

made the script copy files into a temp dir and then move to /ajax/libs/* which makes it work better see #3036
Added expanded jquery-mousewheel v. 3.1.11
Added minified jquery-mousewheel v. 3.1.11
Updated package.json for jquery-mousewheel v. 3.1.11
Updated packages via auto-update.js