PR-URL: #3727
Credit: @darcyclarke
Close: #3727
Reviewed-by: @wraithgar

PR-URL: #3715
Credit: @Matsuuu
Close: #3715
Reviewed-by: @wraithgar

If the package being installed is a url it needs to be cleaned before
logging so passwords aren't potentially logged.

PR-URL: #3732
Credit: @wraithgar
Close: #3732
Reviewed-by: @nlf

This will do an engines check when installing npm globally and fail if
the new npm is known not to work in the current node version.

It will not work for older npm versions because they don't have an
engines field (it wasn't added till npm@6.14.0). It will at least
prevent npm@7 from being installed in node@8.

PR-URL: #3731
Credit: @wraithgar
Close: #3731
Reviewed-by: @nlf