prune: --production option to unbuild devDependencies

Closes #2854.
read-package-json@1.1.3

Brings along normalize-package-data@0.2.2, which closes #3783.
add failing test, depends on npm-registry-mock 0.3.0

test for #3823
update/outdated: don't access missing package info
avoid null derefernces checking the status of a
currently installed package

Fixes #3820, a regression caused by #3798 and #3578