Comment by equidistant

I've raised a PR to rename decode() to unsafeDecode() (removing it from the public API might be a hard sell). I really have no idea why this is part of the public API.

https://github.com/auth0/node-jsonwebtoken/pull/741