Upgrade cordova common

[erisu]

Platforms affected

osx

What does this PR do?

• Bumps cordova-common to ^2.2.5

What testing has been done on this change?

• npm test

[erisu]

Commits cherry-picked from @brodybits' PR #49

[brodycj]

Since master branch now targets next major release please use cordova-common@3.

[erisu]

@brodybits There is no cordova-common@3 in the NPM registry. I can't change it to something that doesn't exist.

Also, if this PR is not pushed, then NPM audit will always show security risk until we do a major release for cordova-common. I would like to to have at least the audit resolved. Even if we are not releasing the major this minute. We still build nightlies which would show these risks, though it should not affect to the users' app.

[brodycj]

Since cordova-common@3.0.0-nightly versions are already published, I would suggest the following alternatives:

• cordova-common@3.0.x
• cordova-common@3.x.x
• cordova-common@^3.0.0-nightly (should match)
• cordova-common@^3.0.0-alpha (should match)

[erisu]

From the dev mailing list discussion, I believe it was decided to not use nightly builds. If this is correct can the PR now be accepted so we can fix at least the audit? And worry about the version bump at release time?

[janpio]

Nothing here that could block a merge - if there is a better way to do things, this can be done in a new, additional PR anyway.

[brodycj]

Fine with me