Major version bumping this due to the new version of read-package-json which
in turn requires the new version of normalize-package-data that in turn
changes how dependency URLs are normalized.  In particular, github shortcuts
are left as shortcuts now, instead of being expanded into URLs.