…le (#8)

As discussed on npm.community[1], the fact that
npm registry authentication tokens
cannot be defined using environment variables
does not seem justified anymore.

The restriction is caused by the config loader translating
* all `_` to `-`
* the whole variable name to lowercase
while the credential checker expects a key ending in `:_authToken`.

This change fixes the problem
by having the credential checker try
a key ending in `:-authtoken` after it tried `:_authToken`.


Fixes: https://npm.community/t/233
Fixes: npm/npm#15565
PR-URL: #8
Credit: @mkhl
Reviewed-By: @zkat

Remove publish from list of commands not affected by dry-run

PR-URL: #34
Credit: @joebowbeer
Reviewed-By: @zkat

Fixes: #986
PR-URL: #35
Credit: @valentin2105
Reviewed-By: @zkat

PR-URL: #36
Credit: @noahbenham
Reviewed-By: @zkat

REVERT REVERT, newer versions of this library are broken and print ansi
codes even when disabled.

PR-URL: #39
Credit: @iarna
Reviewed-By: @zkat

`npm audit` currently exits with exit code 1 if any vulnerabilities are found of any level.

Add a flag of `--audit-level` to `npm audit` to allow it to pass if only vulnerabilities below a certain level are found.

Example: `npm audit --audit-level=high` will exit with 0 if only low or moderate level vulns are detected.

Fixes: https://npm.community/t/245
PR-URL: #31
Credit: @lennym
Reviewed-By: @zkat

)

PR-URL: #32
Credit: @olore
Reviewed-By: @zkat

added a header for usage with process.env to separate section from 'current lifecycle event' and make it easier to find

PR-URL: #14
Credit: @mwarger
Reviewed-By: @zkat

Credit: @zkat

Fixes: kemitchell/validate-npm-package-license.js#8
Credit: @Gudahtt

Credit: @shesek
Fixes: shesek/iferr#2

Fixes: isaacs/node-tar#177
Credit: @isaacs

Fixes: npm/hosted-git-info#34
Fixes: npm/hosted-git-info#32
Fixes: npm/hosted-git-info#35
Credit: @iarna
Credit: @Erveon
Credit: @huochunpeng

Credit: @rvagg