title: Dynamic Package.json
body: <p>I'm working on a nodejs project with multiple private dependencies to GitHub in the <code>package.json</code>, like so:</p>
  
  <pre><code>"dependencies" : {
     "mymodule":"git+https://&lt;token&gt;:xoauthbasic@github.com/my_github_account/my_repo.git#&lt;commit-ish&gt;"
  }
  </code></pre>
  
  <p>I have two problems here:</p>
  
  <ol>
  <li>I don't want the oAuth token apart of my <code>package.json</code> file, for security.</li>
  <li>I want the branch I use for dependencies to be dependent on the environment it is built in. For example: In a production environment, use #master, and in a development environment, use #development.</li>
  </ol>
  
  <p>Are there any solutions to these problems? In addition, it'd be great if the solutions worked with Heroku.</p>