deps: upgrade npm to 6.13.7

PR-URL: #31558
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Trivikram Kamat <trivikr.dev@gmail.com>
Reviewed-By: Rich Trott <rtrott@gmail.com>

deps/npm/AUTHORS

@@ -681,3 +681,4 @@ Felix Yan <felixonmars@archlinux.org>
 Zhenya Vinogradov <zhenyavinogradov@gmail.com>
 Rafael Hengles <rhengles@gmail.com>
 Jan-Philip Gehrcke <jp@opstrace.com>
+Caleb Sacks <16855387+clabe45@users.noreply.github.com>

deps/npm/CHANGELOG.md

@@ -1,3 +1,23 @@
+## 6.13.7 (2020-01-28)
+
+### BUG FIXES
+* [`7dbb91438`](https://github.com/npm/cli/commit/7dbb914382ecd2074fffb7eba81d93262e2d23c6)
+  [#655](https://github.com/npm/cli/pull/655)
+  Update CI detection cases
+  ([@isaacs](https://github.com/isaacs))
+
+### DEPENDENCIES
+* [`0fb1296c7`](https://github.com/npm/cli/commit/0fb1296c7d6d4bb9e78c96978c433cd65e55c0ea)
+  `libnpx@10.2.2`
+  ([@mikemimik](https://github.com/mikemimik))
+* [`c9b69d569`](https://github.com/npm/cli/commit/c9b69d569fec7944375a746e9c08a6fa9bec96ff)
+  `node-gyp@5.0.7`
+  ([@mikemimik](https://github.com/mikemimik))
+* [`e8dbaf452`](https://github.com/npm/cli/commit/e8dbaf452a1f6c5350bb0c37059b89a7448e7986)
+  `bin-links@1.1.7`
+  ([@mikemimik](https://github.com/mikemimik))
+  * [#613](https://github.com/npm/cli/issues/613) Fixes bin entry for package
+
 ## 6.13.6 (2020-01-09)
 
 ### DEPENDENCIES

deps/npm/CONTRIBUTING.md

@@ -3,80 +3,190 @@
 ## Table of Contents
 
 * [Introduction](#introduction)
-* [Roles](#roles)
-  * [Community Members](#community-members)
-  * [Collaborators](#collaborators)
-  * [npm, Inc Employees](#npm-inc-employees)
-
+* [Code Structure](#code-structure)
+* [Running Tests](#running-tests)
+* [Debugging](#debugging)
+* [Coverage](#coverage)
+* [Benchmarking](#benchmarking)
+* [Types of Contributions](#types-of-contributions)
+  * [Contributing an Issue?](#contributing-an-issue)
+  * [Contributing a Question?](#contributing-a-question)
+  * [Contributing a Bug Fix?](#contributing-a-bug-fix)
+  * [Contributing a Feature?](#contributing-a-bug-feature)
+* [Development Dependencies](#development-dependencies)
+* [Dependencies](#dependencies)
 
 ## Introduction
 
-Welcome to the npm CLI Contributor Guide! This document outlines the npm CLI repository's process for community interaction and contribution. This includes the issue tracker, pull requests, wiki pages, and, to a certain extent, outside communication in the context of the npm CLI. It defines roles, responsibilities, and procedures, and is an entry point for anyone wishing to contribute their time and effort to making npm a better tool for the JavaScript community!
+Welcome to the npm CLI Contributor Guide! This document outlines the npm CLI repository's process for community interaction and contribution. This includes the issue tracker, pull requests, wiki pages, and, to a certain extent, outside communication in the context of the npm CLI. This is an entry point for anyone wishing to contribute their time and effort to making npm a better tool for the JavaScript community!
 
 All interactions in the npm repository are covered by the [npm Code of Conduct](https://www.npmjs.com/policies/conduct)
 
-## Roles
 
-There are three main roles for people participating in the npm issue tracker. Each has a specific set of abilities and responsibilities: [Community members](#community-members), [Collaborators](#collaborators), and [npm, Inc employees](#npm-inc-employees).
+## Code Structure
+```
+/
+├── bin/
+│   │                  # Directory for executable files. It's very rare that you
+│   │                  # will need to update a file in this directory.
+│   │
+│   ├── npm               # npm-cli entrypoint for bourne shell
+│   ├── npm-cli.js        # npm-cli entrypoint for node
+│   ├── npm.cmd           # npm-cli entrypoint for windows
+│   ├── npx               # npx entrypoint for bourne shell
+│   ├── npx-cli.js        # npx entrypoint for node
+│   └── npx.cmd           # npx entrypoint for windows
+│
+├── docs/  📖
+│   │                  # Directory that contains the documentation website for
+│   │                  # the npm-cli. You can run this website locally, and have
+│   │                  # offline docs! 🔥📖🤓
+│   │
+│   ├── content/          # Markdown files for site content
+│   ├── src/              # Source files for the website; gatsby related
+│   └── package.json      # Site manifest; scripts and dependencies
+│
+├── lib/  📦
+│                      # All the Good Bits(tm) of the CLI project live here
+│
+├── node_modules/  🔋
+│                      # Vendored dependencies for the CLI project (See the
+│                      # dependencies section below for more details).
+│
+├── scripts/  📜
+│                      # We've created some helper scripts for working with the
+│                      # CLI project, specifically around managing our vendored
+│                      # dependencies, merging in pull-requests, and publishing
+│                      # releases.
+│
+├── test/  🧪
+│                      # All the tests for the CLI live in this folder. We've
+│                      # got a lot of tests 🤓🧪🩺
+│
+├── CONTRIBUTING.md       # This file! 🎉
+└── package.json          # The projects main manifest file 📃
+```
+
+## Running Tests
+
+```
+# Make sure you install the dependencies first before running tests.
+$ npm install
+
+# Run tests for the CLI (it could take awhile).
+$ npm run test
+```
+
+## Debugging
+
+It can be tricky to track down issues in the CLI. It's a large code base that has been evolving for over a decade. There is a handy `make` command that will connect the **cloned repository** you have on your machine with the global command, so you can add `console.log` statements or debug any other way you feel most comfortable with.
+
+```
+# Clone the repository to start with
+$ git clone git@github.com:npm/cli.git
+
+# Change working directories into the repository
+$ cd cli
+
+# Make sure you have the latest code (if that's what you're trying to debug)
+$ git fetch origin latest
+
+# Connect repository to the global namespace
+$ make link
+
+#################
+# ALTERNATIVELY
+#################
+# If ou're working on a feature or bug, you can run the same command on your
+# working branch and link that code.
+
+# Create new branch to work from (there are many ways)
+$ git checkout -b feature/awesome-feature
+
+# Connect repository to global namespace
+$ make link
+```
+
+## Coverage
+
+We try and make sure that each new feature or bug fix has tests to go along with them in order to keep code coverages consistent and increasing. We are actively striving for 100% code coverage!
+
+```
+# You can run the following command to find out coverage
+$ npm run test-coverage
+```
+
+## Benchmarking
+
+We often want to know if the bug we've fixed for the feature we've added has any sort of performance impact. We've created a [benchmark suite](https://github.com/npm/benchmarks) to run against the CLI project from pull-requests. If you would like to know if there are any performance impacts to the work you're contributing, simply do the following:
+
+1. Make a pull-request against this repository
+2. Add the following comment to the pull-request: "`test this please ✅`"
+
+This will trigger the [benmark suite](https://github.com/npm/benchmarks) to run against your pull-request, and when it's finished running it will post a comment on your pull-request just like bellow. You'll be able to see the results from the suite inline in your pull-request.
+
+> You'll notice that the bot-user will also add a 🚀 reaction to your comment to
+let you know that it's sent the request to start the benchmark suite.
+
+![image](https://user-images.githubusercontent.com/2818462/72312698-e2e57f80-3656-11ea-9fcf-4a8f6b97b0d1.png)
+
+If you've updated your pull-reuqest and you'd like to run the the benchmark suite again, simple update your original comment, by adding `test this please ✅` again, or simply just adding another emoji to the **end**. _(The trigger is the phrase "test this please ✅" at the beginning of a comment. Updates will trigger as well, so long as the phrase stays at the beginning.)_.
+
+![image](https://user-images.githubusercontent.com/2818462/72313006-ec231c00-3657-11ea-9bd9-227634d67362.png)
+
+## Types of Contributions
+
+### Contributing an Issue?
 
-Failure to comply with the expected responsibilities of each role, or violating the Code of Conduct will result in punitive action relative to the transgression, ranging from a warning to full removal from the project, at the discretion of npm employees.
+Great!! Is your [new issue](https://github.com/npm/cli/issues/new/choose) a [bug](https://github.com/npm/cli/issues/new?template=bug.md&title=%5BBUG%5D+%3Ctitle%3E), a [feature](https://github.com/npm/cli/issues/new?template=feature.md&title=%5BFEATURE%5D+%3Ctitle%3E), or a [question](https://github.com/npm/cli/issues/new?template=question.md&title=%5BQUESTION%5D+%3Ctitle%3E)?
 
-### Community Members
+### Contributing a Question?
 
-This includes anyone who may show up to the npm/npm repo with issues, PRs, comments etc. They may not have any other involvement with npm.
+Huh? 🤔 Got a situation you're not sure about?! Perfect! We've got some resources you can use.
 
-#### Abilities
+* Our [documentation site](https://docs.npmjs.com/)
+* The local docs that come with the CLI project
 
-* Open issues and PRs
-* Comment on issues and PRs
+  > **Example**: `npm help install --viewer browser`
 
-#### Responsibilities
+* The man pages that are built and shipped with the CLI
 
-* Comment on issues when they have a reference to the answer.
-* If community members aren't sure they are correct and don't have a reference to the answer, please leave the issue and try another one.
-* Defer to collaborators and npm employees for answers.
-* Make sure to search for [the troubleshooting posts on npm.community](https://npm.community/c/support/troubleshooting) and search on the issue tracker for similar issues before opening a new one.
-* Any users with urgent support needs are welcome to email support@npmjs.com, and our dedicated support team will be happy to help.
+  > **Example**: `man npm-install` (only on linux/macOS)
 
-PLEASE don't @ collaborators or npm employees on issues. The CLI team is small, and has many outstanding commitments to fulfill.
+* Search of the [current issues](https://github.com/npm/cli/issues)
 
-### Collaborators
+### Contributing a Bug Fix?
 
-These are folks who have the ability to label and close issues. The role of collaborators may expand over time, but for now it is a limited (& important) role. This is an excellent way to contribute to npm without writing code.
+We'd be happy to triage and help! Head over to the issues and [create a new one](https://github.com/npm/cli/issues/new?template=bug.md&title=%5BBUG%5D+%3Ctitle%3E)!
 
-Community members may become collaborators by showing consistent, proven track record of quality contributions to the project, a reasonable level of proficiency with the CLI, and regular participation through the tracker and other related mediums, including regular contact with the CLI team itself. This role entails a higher level of responsibility than community member, so we ask for a higher level of understanding and commitment.
+> We'll need a little bit of information about what happened, rather than "it broke". Such as:
+* When did/does this bug happen?
+* Can you reproduce it? _(Can you make it happen more than once.)_
+* What version of `node`/`npm` are you running on your computer?
+* What did you expect it to do?
+* What did it _actually do?
+* etc...
 
-Collaborators who become inactive for 3 months or longer may have their collaborator privileges removed until they are ready to return.
+### Contributing a Feature?
 
-#### Abilities
+Snazzy, we're always up for fancy new things! If the feature is fairly minor, the team can triage it and prioritize it into our backlog. However, if the feature is a little more complex, then it's best to create an [RFC](https://en.wikipedia.org/wiki/Request_for_Comments) in our [RFC repository](https://github.com/npm/rfcs). Exactly how to do that is outlined in that repository. If you're not sure _exactly_ how to implement your idea, or don't want to make a document about your idea, then please create an issue on that repository. We consider these RRFC's, or a "Requesting Request For Comment".
 
-* Label/triage new issues
-* Respond to ongoing issues
-* Close resolved issues.
+## Development Dependencies
 
-#### Responsibilities
+You'll need a few things installed in order to update and test the CLI project during development:
 
-* Only answer questions when they know the answer, and provide a reference to the answer.
-* If collaborators aren't totally confident about their answer, please leave the issue and try another one.
-* If they've responded to an issue, it becomes their responsibility to see it to resolution.
-* Defer to fellow Collaborators & npm employees for answers (Again, please don't @ collaborators or npm employees, thank you!)
-* Make sure to search [the troubleshooting posts on npm.community](https://npm.community/c/support/troubleshooting) and search the rest of the forum for similar topics.
+* [node](https://nodejs.org/) v8 or greater
 
-### npm, Inc Employees
+> We recommend that you have a [node version manager](https://github.com/nvm-sh/nvm) installed if you plan on fixing bugs that might be present in a specific version of node. With a version manager you can easily switch versions of node and test if your changes to the CLI project are working.
 
-Folks who work at npm, Inc, who have a responsibility to ensure the stability and functionality of the tools npm offers.
+* [git](https://git-scm.com/) v2.11+
 
-#### Abilities
 
-* Label/triage new issues
-* Respond to ongoing issues
-* Close resolved issues
-* Land PRs
+## Dependencies
 
-Please note that this is a living document, and the CLI team will put up PRs to it as needed.
+> Package vendoring is commonly referred to as the case where dependent packages are stored in the same place as your project. That usually means you dependencies are checked into your source management system, such as Git.
 
-#### Responsibilities
+The CLI project vendors it's dependencies in the `node_modules/` folder. Meaning all the dependencies that the CLI project uses are contained withing the project itself. This is represented by the `bundledDependencies` section in the root level `package.json` file. The main reason for this is because the `npm` CLI project is distributed with the NodeJS runtime and needs to work out of the box, which means all dependencies need to be available after the runtime is installed.
 
-* Preserve and promote the health of the CLI, the registry, the website, etc.
+There are a couple scripts created to help manage this process in the `scripts/` folder.
 
-In special cases, [Collaborators](#collaborators) may request time to speak with an npm employee directly, by contacting them and coordinating a time/place.

deps/npm/README.md

@@ -155,10 +155,6 @@ When you find issues, please report them:
 Be sure to include *all* of the output from the npm command that didn't work
 as expected.  The `npm-debug.log` file is also helpful to provide.
 
-You can also find npm people in `#npm` on https://package.community/ or
-[on Twitter](https://twitter.com/npm_support).  Whoever responds will no
-doubt tell you to put the output in a gist or email.
-
 ## SEE ALSO
 
 * npm(1)

deps/npm/docs/content/configuring-npm/package-json.md

@@ -740,7 +740,8 @@ If a dependency can be used, but you would like npm to proceed if it cannot be
 found or fails to install, then you may put it in the `optionalDependencies`
 object.  This is a map of package name to version or url, just like the
 `dependencies` object.  The difference is that build failures do not cause
-installation to fail.
+installation to fail.  Running `npm install --no-optional` will prevent these
+dependencies from being installed.
 
 It is still your program's responsibility to handle the lack of the
 dependency.  For example, something like this: