[Pkg-javascript-devel] Bug#959789: npm: Please remove dependency to node-cross-spawn

[yadd at debian.org]

Package: npm
Severity: important
Control: block 958403 by -1

node-cross-spawn reimplement builtin Node.js functions
child_process.sync and child_process.spawnSync compatible with
Windows.

This package has also some security holes. Please patch code to
replace `cross-spawn.spawn` by `child_process.sync`