deps: pin request version range

Required for "node < 4" compatibility and is congruent with `npm`

minimum for passing `npm test` >= 2.9.0
setting < 2.82.0 allows deduping

PR-URL: #1300
Fixes: #1299
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Anna Henningsen <anna@addaleax.net>

package.json

@@ -28,7 +28,7 @@
     "nopt": "2 || 3",
     "npmlog": "0 || 1 || 2 || 3 || 4",
     "osenv": "0",
-    "request": "^2.87.0",
+    "request": ">=2.9.0 <2.82.0",
     "rimraf": "2",
     "semver": "~5.3.0",
     "tar": "^4.4.8",