fix(deps): Remove nsp support, add npm audit support in logging only mode. (#274) r=@vladikoff

fixes #270
fixes #271

.nsprc

@@ -1,6 +0,0 @@
-{
-  "exceptions": [
-    // restify
-    "https://nodesecurity.io/advisories/598"
-  ]
-}

.travis.yml

@@ -26,7 +26,7 @@ before_install:
   - npm config set spin false
 
 script:
-  - grunt nsp --force
+  - npm audit || true # logging only for now
   - npm run outdated
   - node_modules/.bin/grunt lint copyright || exit 1
   - node_modules/.bin/tap -R spec test/local test/remote

grunttasks/nsp.js

@@ -1,12 +0,0 @@
-/* This Source Code Form is subject to the terms of the Mozilla Public
- * License, v. 2.0. If a copy of the MPL was not distributed with this
- * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
-
-module.exports = function (grunt) {
-  'use strict'
-
-  grunt.config('nsp', {
-    output: 'summary',
-    package: grunt.file.readJSON('package.json')
-  })
-}

package.json

@@ -12,7 +12,6 @@
   "homepage": "https://github.com/mozilla/fxa-customs-server/",
   "bugs": "https://github.com/mozilla/fxa-customs-server/issues/",
   "scripts": {
-    "nsp": "grunt nsp",
     "outdated": "npm outdated --depth 0 || exit 0",
     "shrink": "npmshrink",
     "start": "node bin/customs_server.js",
@@ -39,18 +38,17 @@
   "devDependencies": {
     "eslint-config-fxa": "2.1.0",
     "fxa-conventional-changelog": "1.1.0",
-    "grunt": "1.0.1",
+    "grunt": "1.0.3",
     "grunt-bump": "0.8.0",
     "grunt-cli": "1.2.0",
-    "grunt-conventional-changelog": "3.0.0",
+    "grunt-conventional-changelog": "6.1.0",
     "grunt-copyright": "0.3.0",
     "grunt-eslint": "18.0.0",
-    "grunt-nsp": "2.3.1",
     "load-grunt-tasks": "3.5.0",
     "npmshrink": "1.0.1",
     "request": "2.85.0",
     "restify-clients": "2.5.0",
-    "tap": "6.2.0",
+    "tap": "12.0.1",
     "walk": "2.3.x"
   },
   "engines": {