[remote memory disclosure]
fixed in 1.0.1
https://nodesecurity.io/advisories/67
nodejs not covered by security support
