Yargs: Remove pinkie-promise in the dependencies chain

[thangngoc89]

The original author of pinkie-promise: @floatdrop has unpublished all of his packages from npm (leftpad anyone? ) . And someone is taking control of the package in npm. pinkie-promise is used in find-up of yargs.

You can follow the thread here https://github.com/floatdrop/pinkie-promise/issues/4

[zenflow]

@thangngoc89 The author didn't unpublish the packages. Actually, since the leftpad incident, npm does not allow you to unpublish a package after 24 hours of it's initial publication. It was some kind of operational failure at npm. http://blog.npmjs.org/post/169432444640/npm-operational-incident-6-jan-2018

I think this issue can be closed.

[zenflow]

Check out this similar issue: https://github.com/lerna/lerna/issues/1182

[thangngoc89]

Hi. I posted this in the very early minutes of the incident (way before npm even reported an incident). So this can be close now.

[bcoe]

missed this issue because I was ironically helping out (to a small degree) with the npm ops around the incident -- a more thorough post from my peers at npm will be going up soon.