simplify normalization
warn on fetch failure (closes #6644)
prevent the auth regression fixed by 7719cfd

Make sure that the correct credentials are being used for auth.
fs-vacuum@1.2.2

Don't complain when somebody writes to a path you're vacuuming after
you've checked that it's empty, just log and bail out. Also log when
somebody else wins the race to remove the empty directory.
never remove project directories (fixes #5754)

A failed install could cause the removal of an empty (new) project
directory because fs-vacuum wasn't being told where to stop vacuuming up
empty directories. Pass in the project path to provide a hard
backstop for fs-vacuum, and be more careful to specify which things
should be gently removed during unbuilding.
add failing test
init: dont report write if canceled
uid-number@0.0.6

Clarify confusing names in error-handling code (thanks, @muddletoes!).
npm ll --depth=0 breaks for deps with deps
only ls -l children when < depth (closes #6311)
.npmignore isn't respected for git repos
clone & checkout instead of archive (fixes #6400)
Pass auth parameters to requestAll_ for alwaysAuth.
finish cleaning up updateIndex for consistency