Merge pull request #29 from msd-code-academy/npm-audit

Author: Aprillion

.gitignore

@@ -26,9 +26,6 @@ coverage
 # node-waf configuration
 .lock-wscript
 
-# Compiled binary addons (http://nodejs.org/api/addons.html)
-build/Release
-
 # Dependency directories
 node_modules
 jspm_packages
@@ -51,3 +48,11 @@ jspm_packages
 # IDE stuff
 *.iml
 /.idea
+
+# moved from nested .gitignore files
+/build
+.DS_Store
+
+# do not endorse out of date library versions (see README)
+package-lock.json
+yarn.lock

README.md

@@ -2,6 +2,8 @@
 
 Materials for Javascript Code Academy, updated for second run starting October 2017.
 
+Please run `npm audit` before using any of our examples at a later date (the 3rd party dependencies might receive important security updates).
+
 ## Community
 
 We believe in giving back to the community. We are group of people who would like to see even more junior and senior developers to start using React.