Tag a release please

[createthis]

@ni3galave Can we tag a new release? The removal of npm as a dependency is important from a security perspective. The recent tar vulnerability, for example: https://npmjs.com/advisories/1771