Update to npm@5.4.2

* Update package-lock.json
* Remove flow-bin workaround
* Re-enable locked-deps tests in AppVeyor

.travis.yml

@@ -16,7 +16,7 @@ cache:
   directories:
     - $HOME/.npm
 before_install:
-  - npm install --global npm@5.4.0
+  - npm install --global npm@5.4.2
   - npm --version
 install:
   - if [[ ${FRESH_DEPS} == "true" ]]; then npm install --no-shrinkwrap --prefer-online; else npm install --prefer-offline; fi

appveyor.yml

@@ -8,7 +8,7 @@ skip_commits:
     - '**/*.md'
 configuration:
   - FreshDeps
-#  - LockedDeps
+  - LockedDeps
 environment:
   matrix:
     - nodejs_version: 8
@@ -23,11 +23,11 @@ matrix:
       nodejs_version: 4
 install:
   - ps: Install-Product node $env:nodejs_version
-  - npm install --global npm@5.4.0
+  - npm install --global npm@5.4.2
   - npm --version
   - git config core.symlinks true
   - git reset --hard
-  - if %configuration% == FreshDeps (npm install --no-optional --no-shrinkwrap --prefer-online)
-  - if %configuration% == LockedDeps (npm install --no-optional --prefer-offline)
+  - if %configuration% == FreshDeps (npm install --no-shrinkwrap --prefer-online)
+  - if %configuration% == LockedDeps (npm install --prefer-offline)
 test_script:
   - npm run test-win