fixed bug: timeout wasn't passed to pacote

also requests to check updates for dependencies are now made in batches instead
of making all of them at once resulting in default timeout being exeeded
when number of dependencies is big
	modified:   lib/package-managers/npm.js
	modified:   lib/versionmanager.js
	modified:   package-lock.json
	modified:   package.json

lib/package-managers/npm.js

@@ -70,7 +70,7 @@ function viewMany(packageName, fields, currentVersion, {timeout} = {}) {
 
     npmConfig.fullMetadata = _.includes(fields, 'time');
 
-    return pacote.packument(packageName, Object.assign({}, npmConfig, timeout)).then(result =>
+    return pacote.packument(packageName, Object.assign({}, npmConfig, {timeout})).then(result =>
         fields.reduce((accum, field) => Object.assign(
             accum,
             {

lib/versionmanager.js

@@ -7,7 +7,8 @@ const ProgressBar = require('progress');
 const versionUtil = require('./version-util.js');
 const packageManagers = require('./package-managers');
 const prompts = require('prompts');
-
+const pMap = require('p-map');
+const os = require('os');
 // keep order for setPrecision
 const DEFAULT_WILDCARD = '^';
 
@@ -456,7 +457,7 @@ function queryVersions(packageMap, options = {}) {
         });
     }
 
-    return Promise.all(packageList.map(getPackageVersionProtected))
+    return pMap(packageList,getPackageVersionProtected,{concurrency: os.cpus().length})
         .then(zipVersions)
         .then(_.partialRight(_.pickBy, _.identity));
 }

package.json

@@ -55,6 +55,7 @@
     "libnpmconfig": "^1.2.1",
     "lodash": "^4.17.15",
     "node-alias": "^1.0.4",
+    "p-map": "^4.0.0",
     "pacote": "^11.1.0",
     "progress": "^2.0.3",
     "prompts": "^2.3.1",