[CB-9332] Update `npm` and `semver` dependencies for cordova

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Component/s: cordova-lib
• Flags: Important
• Assignee: Vladimir Kotikov
• Reporter: Vladimir Kotikov
• Created: 08/Jul/15 08:17
• Updated: 23/Aug/18 06:50
• Resolved: 17/Jul/15 13:31

Description

There are the following dependencies for cordova-lib are outdated and should be updated:

• npm 1.3.4 to 2.7.5
• npmconf 0.1.16 to 2.1.1
• semver 2.0.11 to 4.3.3

However, the update was blocked due to issues with publishing to CPR and npm@>1.3.4. Since the CPR going to became a read-only, we get a chance to update these dependencies.

Also cordova-plugman is still depends on npm, even though the dependency is not actually used anywhere. So probably it should be removed.

Issue Links

• relates to: CB-8284 Unable to publish new versions of existing plugins
• relates to: CB-8356 npm dependency needs 2.x update to fix npm install issue of package
• relates to: CB-8662 Latest release of Cordova breaks http via proxy
• requires: CB-9330 Remove 'plugman publish' functionality from cordova-lib