deps: update npm to 5.2.0

deps/npm/.github/CODEOWNERS

@@ -0,0 +1 @@
+*	@npm/cli-team

deps/npm/.travis.yml

@@ -22,32 +22,18 @@ matrix:
       # then master
     - node_js: "8"
       env: DEPLOY_VERSION=testing
+      script:
+       - "standard"
+       - "node . run tap -- \"test/tap/*.js\" \"test/broken-under-nyc/*.js\""
 before_install:
   # required by test/tap/registry.js
   - "mkdir -p /var/run/couchdb"
 notifications:
     slack: npm-inc:kRqQjto7YbINqHPb1X6nS3g8
 cache:
   directories:
-  - $HOME/.npm
-  - html/doc
-  - man
-  - node_modules/.bin
   - node_modules/.cache
-  - node_modules/deep-equal
-  - node_modules/marked
-  - node_modules/marked-man
-  - node_modules/npm-registry-couchapp
-  - node_modules/npm-registry-mock
-  - node_modules/require-inject
-  - node_modules/sprintf-js
-  - node_modules/standard
-  - node_modules/tacks
-  - node_modules/tap
 install:
-  - "node . rebuild --depth=0"
-  - "node . install --ignore-scripts"
-  - "node . prune"
-  - "make -j4 doc"
+  - "node . install"
 script:
   - "node . run tap -- \"test/tap/*.js\" \"test/broken-under-nyc/*.js\""

deps/npm/AUTHORS

@@ -475,3 +475,26 @@ Jason Wohlgemuth <[email protected]>
 Ryan Graham <[email protected]>
 Hirse <[email protected]>
 Colin Rotherham <[email protected]>
+Aki <[email protected]>
+Emily Marigold Klassen <[email protected]>
+Ramana Venkata <[email protected]>
+kierendixon <[email protected]>
+Rácz Tibor Zoltán <[email protected]>
+Guangcong Luo <[email protected]>
+Steven <[email protected]>
+Jan Pilzer <[email protected]>
+Leonard Martin <[email protected]>
+Teddy Katz <[email protected]>
+Simon Legg <[email protected]>
+Kin Lum <[email protected]>
+dax <[email protected]>
+Jože Mlakar <[email protected]>
+happylynx <[email protected]>
+Dominic Watson <[email protected]>
+Enrico Weigelt, metux IT consult <[email protected]>
+Brian Beck <[email protected]>
+Ramana Venkata <[email protected]>
+mmkal <[email protected]>
+Andrew Schmadel <[email protected]>
+AJ Jordan <[email protected]>
+Mark Banner <[email protected]>

deps/npm/Makefile

@@ -14,7 +14,8 @@ html_docdeps = html/dochead.html \
 cli_mandocs = $(shell find doc/cli -name '*.md' \
                |sed 's|.md|.1|g' \
                |sed 's|doc/cli/|man/man1/|g' ) \
-               man/man1/npm-README.1
+               man/man1/npm-README.1 \
+               man/man1/npx.1
 
 files_mandocs = $(shell find doc/files -name '*.md' \
                |sed 's|.md|.5|g' \
@@ -56,7 +57,7 @@ latest:
 	node bin/npm-cli.js install -g -f npm ${NPMOPTS}
 
 install: all
-	node bin/npm-cli.js install -g -f ${NPMOPTS}
+	node bin/npm-cli.js install -g -f ${NPMOPTS} $(shell node bin/npm-cli.js pack | tail -1)
 
 # backwards compat
 dev: install
@@ -96,6 +97,9 @@ man/man1/%.1: doc/cli/%.md scripts/doc-build.sh package.json
 	@[ -d man/man1 ] || mkdir -p man/man1
 	scripts/doc-build.sh $< $@
 
+man/man1/npx.1: node_modules/libnpx/libnpx.1
+	cat $< | sed s/libnpx/npx/ > $@
+
 man/man5/npm-json.5: man/man5/package.json.5
 	cp $< $@
 

deps/npm/README.md

@@ -158,8 +158,9 @@ When you find issues, please report them:
 Be sure to include *all* of the output from the npm command that didn't work
 as expected.  The `npm-debug.log` file is also helpful to provide.
 
-You can also look for isaacs in #node.js on irc://irc.freenode.net.  She
-will no doubt tell you to put the output in a gist or email.
+You can also find npm people in `#npm` on https://package.community/ or
+[on Twitter](https://twitter.com/npm_support).  Whoever responds will no
+doubt tell you to put the output in a gist or email.
 
 ## SEE ALSO
 

deps/npm/bin/npx

@@ -0,0 +1,34 @@
+#!/bin/sh
+(set -o igncr) 2>/dev/null && set -o igncr; # cygwin encoding fix
+
+basedir=`dirname "$0"`
+
+case `uname` in
+    *CYGWIN*) basedir=`cygpath -w "$basedir"`;;
+esac
+
+NODE_EXE="$basedir/node.exe"
+if ! [ -x "$NODE_EXE" ]; then
+  NODE_EXE=node
+fi
+
+NPX_CLI_JS="$basedir/node_modules/npm/bin/npx-cli.js"
+
+case `uname` in
+  *MINGW*)
+    NPM_PREFIX=`"$NODE_EXE" "$NPX_CLI_JS" prefix -g`
+    NPM_PREFIX_NPX_CLI_JS="$NPM_PREFIX/node_modules/npm/bin/npx-cli.js"
+    if [ -f "$NPM_PREFIX_NPX_CLI_JS" ]; then
+      NPX_CLI_JS="$NPM_PREFIX_NPX_CLI_JS"
+    fi
+    ;;
+  *CYGWIN*)
+    NPM_PREFIX=`"$NODE_EXE" "$NPX_CLI_JS" prefix -g`
+    NPM_PREFIX_NPX_CLI_JS="$NPM_PREFIX/node_modules/npm/bin/npx-cli.js"
+    if [ -f "$NPM_PREFIX_NPX_CLI_JS" ]; then
+      NPX_CLI_JS="$NPM_PREFIX_NPX_CLI_JS"
+    fi
+    ;;
+esac
+
+"$NODE_EXE" "$NPX_CLI_JS" "$@"

deps/npm/bin/npx-cli.js

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+
+const npx = require('libnpx')
+const path = require('path')
+
+const NPM_PATH = path.join(__dirname, 'npm-cli.js')
+
+npx(npx.parseArgs(process.argv, NPM_PATH))

deps/npm/bin/npx.cmd

@@ -0,0 +1,19 @@
+:: Created by npm, please don't edit manually.
+@ECHO OFF
+
+SETLOCAL
+
+SET "NODE_EXE=%~dp0\node.exe"
+IF NOT EXIST "%NODE_EXE%" (
+  SET "NODE_EXE=node"
+)
+
+SET "NPX_CLI_JS=%~dp0\node_modules\npm\bin\npx-cli.js"
+FOR /F "delims=" %%F IN ('CALL "%NODE_EXE%" "%NPX_CLI_JS%" prefix -g') DO (
+  SET "NPM_PREFIX_NPX_CLI_JS=%%F\node_modules\npm\bin\npx-cli.js"
+)
+IF EXIST "%NPM_PREFIX_NPX_CLI_JS%" (
+  SET "NPX_CLI_JS=%NPM_PREFIX_NPX_CLI_JS%"
+)
+
+"%NODE_EXE%" "%NPX_CLI_JS%" %*

deps/npm/doc/cli/npm-config.md

@@ -6,7 +6,7 @@ npm-config(1) -- Manage the npm configuration files
     npm config set <key> <value> [-g|--global]
     npm config get <key>
     npm config delete <key>
-    npm config list
+    npm config list [-l]
     npm config edit
     npm get <key>
     npm set <key> <value> [-g|--global]
@@ -48,7 +48,7 @@ Echo the config value to stdout.
 
     npm config list
 
-Show all the config settings.
+Show all the config settings. Use `-l` to also show defaults.
 
 ### delete
 

deps/npm/doc/cli/npm-install.md

@@ -343,6 +343,9 @@ being installed.
 The `--no-shrinkwrap` argument, which will ignore an available
 package lock or shrinkwrap file and use the package.json instead.
 
+The `--no-package-lock` argument will prevent npm from creating a
+`package-lock.json` file.
+
 The `--nodedir=/path/to/node/source` argument will allow npm to find the
 node source code so that npm can compile native modules.
 

deps/npm/doc/cli/npm-run-script.md

@@ -3,7 +3,7 @@ npm-run-script(1) -- Run arbitrary package scripts
 
 ## SYNOPSIS
 
-    npm run-script <command> [-- <args>...]
+    npm run-script <command> [--silent] [-- <args>...]
 
     alias: npm run
 
@@ -50,6 +50,8 @@ not found in the `PATH`.
 If you try to run a script without having a `node_modules` directory and it fails,
 you will be given a warning to run `npm install`, just in case you've forgotten.
 
+You can use the `--silent` flag to prevent showing `npm ERR!` output on error.
+
 ## SEE ALSO
 
 * npm-scripts(7)

deps/npm/doc/files/npm-folders.md

@@ -20,10 +20,9 @@ This document will tell you what it puts where.
 ### prefix Configuration
 
 The `prefix` config defaults to the location where node is installed.
-On most systems, this is `/usr/local`. On windows, this is the exact
-location of the node.exe binary.  On Unix systems, it's one level up,
-since node is typically installed at `{prefix}/bin/node` rather than
-`{prefix}/node.exe`.
+On most systems, this is `/usr/local`. On Windows, it's `%AppData%\npm`.
+On Unix systems, it's one level up, since node is typically installed at
+`{prefix}/bin/node` rather than `{prefix}/node.exe`.
 
 When the `global` flag is set, npm installs things into this prefix.
 When it is not set, it uses the root of the current package, or the

deps/npm/doc/files/package.json.md

@@ -700,12 +700,11 @@ The host architecture is determined by `process.arch`
 
 ## preferGlobal
 
-If your package is primarily a command-line application that should be
-installed globally, then set this value to `true` to provide a warning
-if it is installed locally.
+**DEPRECATED**
 
-It doesn't actually prevent users from installing it locally, but it
-does help prevent some confusion if it doesn't work as expected.
+This option used to trigger an npm warning, but it will no longer warn. It is
+purely there for informational purposes. It is now recommended that you install
+any binaries as local devDependencies wherever possible.
 
 ## private