npm / arborist / #267

push

Save provided range if not a subset of savePrefix

If a user installs `foo@1.x <1.2.3`, and we resolve to `1.2.2`, then we
should not save it as `^1.2.2`, since that would allow versions outside
of the requested range.

Explicit versions and tags are still saved using the savePrefix, since
those are not ranges, and users can set `--save-exact` if they wish it
to be saved exactly.

Fix: https://github.com/npm/arborist/issues/127
Fix: https://github.com/npm/cli/pull/193
Fix: https://npm.community/t/7005

2252 of 2252 branches covered (100.0%)

Branch coverage included in aggregate %.

3259 of 3259 relevant lines covered (100.0%)

354.21 hits per line