make `npm outdated` work with --depth

For https://github.com/isaacs/npm/issues/4192
Making it use read-installed seems to be out of scope for this, so I simply patched the existing. Tap test included.