[Tests] remove nsp; use npm audit; allow to fail for now

.npmrc

@@ -1 +1,2 @@
 package-lock=false
+audit-level=high

.travis.yml

@@ -260,3 +260,4 @@ matrix:
     - os: osx
     - env: TEST=true ALLOW_FAILURE=true
     - env: COVERAGE=true
+    - env: POSTTEST=true

package.json

@@ -9,11 +9,13 @@
 		"pretest": "npm run lint",
 		"test": "npm run tests-only",
 		"tests-only": "node --harmony --es-staging test",
-		"posttest": "npm run security",
+		"posttest": "npm run audit",
 		"coverage": "covert test.js",
 		"lint": "eslint test.js *.js",
 		"eccheck": "editorconfig-tools check *.js **/*.js > /dev/null",
-		"security": "nsp check"
+		"preaudit": "npm install --package-lock --package-lock-only",
+		"audit": "npm audit",
+		"postaudit": "rm package-lock.json"
 	},
 	"repository": {
 		"type": "git",
@@ -38,7 +40,6 @@
 		"foreach": "^2.0.5",
 		"indexof": "^0.0.1",
 		"is": "^3.2.1",
-		"nsp": "^3.2.1",
 		"replace": "^1.0.0",
 		"semver": "^5.5.0",
 		"tape": "^4.9.0"