detail: Switch to inverting the cmd to run instead of quoting

The idea here is that this way double clicking the command to run will never
pick up backticks. It's also substantially more visible.

I swapped from `ansicolors` to my own `console-control-strings` for this to
get the invert codes.

lib/utils.js

@@ -1,29 +1,26 @@
 'use strict'
+exports.severityLabel = severityLabel
+exports.color = color
 
-const colors = require('ansicolors')
+const ccs = require('console-control-strings')
 
-const severityColors = {
-  critical: colors.magenta,
-  high: colors.red,
-  moderate: colors.yellow,
-  low: function (str) { return str }
+function color (name) {
+  const start = ccs.color(name)
+  const stop = ccs.color(reset)
+  return str => start + str + stop
 }
 
-const severityLabel = function (sev, withColor) {
-  if (withColor) {
-    return severityColors[sev](sev)
-  }
-  return sev
+const severityColors = {
+  critical: 'magenta',
+  high: 'red',
+  moderate: 'yellow',
+  low: null
 }
 
-const color = function (value, color, withColor) {
-  if (withColor) {
-    return colors[color](value)
-  }
-  return value
+function color (value, colorName, withColor) {
+  return (colorName && withColor) ? ccs.color(colorName) + value + ccs.color('reset') : value
 }
 
-module.exports = {
-  severityLabel: severityLabel,
-  color: color
+function severityLabel (sev, withColor) {
+  return color(sev, severityColors[sev], withColor)
 }

package.json

@@ -17,9 +17,9 @@
   "author": "Adam Baldwin",
   "license": "ISC",
   "dependencies": {
-    "ansicolors": "^0.3.2",
     "ansistyles": "^0.1.3",
-    "cli-table2": "^0.2.0"
+    "cli-table2": "^0.2.0",
+    "console-control-strings": "^1.1.0"
   },
   "devDependencies": {
     "keyfob": "^1.0.0",

reporters/detail.js

@@ -92,7 +92,7 @@ const report = function (data, options) {
         if (action.action === 'update' || action.action === 'install') {
           const recommendation = getRecommendation(action, config)
           const label = action.resolves.length === 1 ? 'vulnerability' : 'vulnerabilities'
-          log(`\n\n# Run \`${Utils.color(recommendation.cmd, 'red', config.withColor)}\` to resolve ${action.resolves.length} ${label}`)
+          log(`\n\n# Run ${Utils.color(recommendation.cmd, ['red', 'inverse'], config.withColor)} to resolve ${action.resolves.length} ${label}`)
           if (recommendation.isBreaking) {
             log(`SEMVER WARNING: Recommended action is a potentially breaking change`)
           }

test/detail-report-test.js

@@ -46,7 +46,7 @@ tap.test('it generates a detail report with one vuln (review dev dep)', function
 tap.test('it generates a detail report with one vuln, no color', function (t) {
   return Report(fixtures['one-vuln'], {reporter: 'detail', withColor: false}).then((report) => {
     t.match(report.exitCode, 1)
-    t.match(report.report, /# Run `npm update tough-cookie --depth 6` to resolve 1 vulnerability/)
+    t.match(report.report, /# Run npm update tough-cookie --depth 6 to resolve 1 vulnerability/)
   })
 })