added npm depends

.npm/package/.gitignore

@@ -0,0 +1 @@
+node_modules

.npm/package/README

@@ -0,0 +1,7 @@
+This directory and the files immediately inside it are automatically generated
+when you change this package's NPM dependencies. Commit the files in this
+directory (npm-shrinkwrap.json, .gitignore, and this README) to source control
+so that others run the same versions of sub-dependencies.
+
+You should NOT check in the node_modules directory that Meteor automatically
+creates; if you are using git, the .gitignore file tells git to ignore it.

.npm/package/npm-shrinkwrap.json

@@ -0,0 +1,9 @@
+{
+  "dependencies": {
+    "sift": {
+      "version": "3.2.6",
+      "resolved": "https://registry.npmjs.org/sift/-/sift-3.2.6.tgz",
+      "from": "sift@3.2.6"
+    }
+  }
+}

main.server.js

@@ -1 +1,6 @@
 import './lib/exposure/extension.js';
+
+import { checkNpmVersions } from 'meteor/tmeasday:check-npm-versions';
+checkNpmVersions({
+    'sift': '3.2.x'
+}, 'cultofcoders:grapher');

package.js

@@ -10,6 +10,10 @@ Package.describe({
     documentation: 'README.md'
 });
 
+Npm.depends({
+    'sift': '3.2.6'
+});
+
 Package.onUse(function (api) {
     api.versionsFrom('1.3');
 
@@ -21,6 +25,7 @@ Package.onUse(function (api) {
         'matb33:collection-hooks@0.8.4',
         'reywood:publish-composite@1.4.2',
         'dburles:mongo-collection-instances@0.3.5',
+        'tmeasday:check-npm-versions@0.3.1',
         'meteorhacks:aggregate@1.3.0',
         'mongo'
     ];