feat(package): Move nsp check from prepare step to an optional script. (

#16)

* prepare will now output a message telling the user how to run nsp.

fixes #15

licenses/licenses.xml

@@ -1,7 +1,7 @@
 <?xml version='1.0'?>
 <licenseSummary>
     <project>nodejs-rest-http-secured-redhat</project>
-    <version>1.0.0</version>
+    <version>1.0.1</version>
     <license>Apache-2.0</license>
     <dependencies>
         <dependency>

package.json

@@ -6,7 +6,8 @@
   "scripts": {
     "test": "tape test/*.js | tap-spec",
     "lint": "eslint test/*.js app.js bin/*",
-    "prepare": "nsp check",
+    "prepare": "echo 'To confirm CVE compliance, run \"npm run security-check\"' ",
+    "security-check": "nsp check",
     "coverage": "nyc npm test",
     "coveralls": "nyc npm test && nyc report --reporter=text-lcov | coveralls",
     "ci": "npm run lint && npm run coveralls",