fix: package.json & .snyk to reduce vulnerabilities

The following vulnerabilities are ignored:
- https://snyk.io/vuln/npm:ms:20170412

Latest report for snyk/policy:
https://snyk.io/test/github/snyk/policy

.snyk

@@ -0,0 +1,18 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.7.0
+# ignores vulnerabilities until expiry date; change duration by modifying expiry date
+ignore:
+  'npm:ms:20170412':
+    - debug > ms:
+        reason: None given
+        expires: '2017-06-15T18:12:23.826Z'
+    - snyk-module > debug > ms:
+        reason: None given
+        expires: '2017-06-15T18:12:23.826Z'
+    - snyk-resolve > debug > ms:
+        reason: None given
+        expires: '2017-06-15T18:12:23.826Z'
+    - snyk-try-require > debug > ms:
+        reason: None given
+        expires: '2017-06-15T18:12:23.826Z'
+patch: {}

package.json

@@ -9,7 +9,9 @@
     "cover": "tap test/**/*.test.js --cov --coverage-report=lcov",
     "tap": "tap test/**/*.test.js --cov --timeout=60",
     "test": "npm run check-tests && npm run lint && npm run tap",
-    "semantic-release": "semantic-release pre && npm publish && semantic-release post"
+    "semantic-release": "semantic-release pre && npm publish && semantic-release post",
+    "snyk-protect": "snyk protect",
+    "prepublish": "npm run snyk-protect"
   },
   "keywords": [
     "snyk"
@@ -33,10 +35,12 @@
     "snyk-module": "^1.8.1",
     "snyk-resolve": "^1.0.0",
     "snyk-try-require": "^1.1.1",
-    "then-fs": "^2.0.0"
+    "then-fs": "^2.0.0",
+    "snyk": "^1.30.1"
   },
   "repository": {
     "type": "git",
     "url": "https://github.com/Snyk/policy.git"
-  }
+  },
+  "snyk": true
 }