upgrade tmp to not use node internals

[hcldan]

No description provided.

[hcldan]

upgrade tmp beyond #21
The travis build there may have been failing because tmp > 0.0.33 no longer supports older node versions.
So you would want to stop testing on Node 4 and Node 5

[roggervalf]

is there any chance to get this pr merged @mrkmg?

[SBoudrias]

This package not being maintained anymore, and being a core dependency of Inquirer, I went ahead and forked it over at https://www.npmjs.com/package/@inquirer/external-editor - I've maintained Inquirer for >12 years and its one of the most popular package on npm; so I think that project is trustworthy new owner.

It drops tmp in favor of node built-in, the interface for the v1 release is backward compatible to ensure an easy drop-in replacement for folks running into the CVE issue. (v2 onward could contain breaking changes as I modernize the codebase and simplify the interface)