Bump common to v2.5.1, fix read permissions for nodejs-scan