it enables you to run git diff after updating your npm dependencies, so you at least have a chance to detect something shady