Port 22

Sitting comfortably? Then it's probably time to patch, as critical flaw uncovered in npm's netmask package