Outdated UglifyJS dependency triggers a fail if it goes through Node Security Project (https://nodesecurity.io/advisories/48). Updating UglifyJS to >=2.6.0 would solve the issue.