Test folder in npm

[SethDavenport]

I've just added madge to a project; I'm using it for its ability to detect circular import dependencies - works like a charm! Thanks for this tool, they're maddening to track down without it.

However since we also have retirejs checking for package vulnerabilities, I'm getting a warning from a copy of JQuery you have in your test folder:

/Users/sdavenport/code/wealthsimple/micro-app/node_modules/madge/test/amd/requirejs/vendor/jquery-2.0.3.js
 ↳ jquery 2.0.3 has known vulnerabilities: severity: medium; issue: 2432, summary: 3rd party CORS request may execute, CVE: CVE-2015-9251; https://github.com/jquery/jquery/issues/2432 http://blog.jquery.com/201

Doesn't look like this is used at runtime based on the fact that it's in your test folder, so no big deal, I'll work around it for now.

However I'm wondering if test even belongs in the npm repository to begin with. Would you consider adding it to a .npmignore so that only things needed for consumers at runtime are shipped to the npm registry when you publish?

[SethDavenport]

I'm happy to make a PR if this makes sense.

[pahen]

Yes, no need for the test folder to be in NPM. PR accepted 😊

[SethDavenport]

Cool. As promised: #205