npm / cli

Add normalize-package-data as a direct dependency to improve deduping.

A change to "correctly rename object files for absolute paths"
caused a bug in windows. A fix has already landed upstream in
gyp-next and been release as 0.6.2, but has not yet made it's
way to a release of node-gyp.

This float the upgrade to 0.6.2 in node-gyp

Closes: #1974

Refs: https://github.com/nodejs/gyp-next/releases/tag/v0.6.2
Refs: nodejs/node-gyp#2241
Signed-off-by: Myles Borins <mylesborins@github.com>

PR-URL: #1976
Credit: @MylesBorins
Close: #1976
Reviewed-by: @ruyadorno

A change to "correctly rename object files for absolute paths"
caused a bug in windows. A fix has already landed upstream in
gyp-next, but has not yet made it's way to a release of gyp-next
or to node-gyp.

Let's float the change until it is fixed upstream.

Refs: nodejs/gyp-next#74

PR-URL: #1974
Credit: @MylesBorins
Close: #1974
Reviewed-by: @ruyadorno

PR-URL: #1967
Credit: @ruyadorno
Close: #1967
Reviewed-by: @darcyclarke

PR-URL: #1971
Credit: @ShangguanQuail
Close: #1971
Reviewed-by: @ruyadorno

If we're running the 'audit' command, then a failed endpoint means that
the command failed.  Error out in that case.

Otherwise, if it's a quick audit as part of another command, just return
a value to indicate that we should not print audit info.

This avoids showing '0 vulnerabilities found', which, while amusingly
technically correct, is misleading and not very helpful.

Fix: #1951

Credit: @isaacs
Close: #1956
Reviewed-by: @darcyclarke

Adds docs on workspaces, explaining its basic concept and how to use it.

Updates to ERESOLVE explanation code