diff --git a/.gitignore b/.gitignore
index 77f05fa4..1e3b179d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -5,3 +5,7 @@
 # Only apps should have lockfiles
 yarn.lock
 package-lock.json
+
+# coverage data
+coverage/
+.nyc_output/
diff --git a/package.json b/package.json
index 68791203..0f07f253 100644
--- a/package.json
+++ b/package.json
@@ -26,6 +26,7 @@
         "through": "~2.3.8"
     },
     "devDependencies": {
+        "aud": "~1.1.5",
         "concat-stream": "^1.6.2",
         "eclint": "^2.8.1",
         "ecstatic": "^4.1.4",
@@ -40,7 +41,8 @@
         "lint": "eslint .",
         "pretest": "npm run lint",
         "test": "npm run tests-only",
-        "tests-only": "tap test/*.js"
+        "posttest": "aud --production",
+        "tests-only": "nyc tap test/*.js"
     },
     "testling": {
         "files": "test/browser/*.js",