diff --git a/node_modules/npm-registry-fetch/CHANGELOG.md b/node_modules/npm-registry-fetch/CHANGELOG.md
index 0340ab46e7acd..04a4dd901b0f8 100644
--- a/node_modules/npm-registry-fetch/CHANGELOG.md
+++ b/node_modules/npm-registry-fetch/CHANGELOG.md
@@ -2,6 +2,26 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+<a name="4.0.7"></a>
+## [4.0.7](https://github.com/npm/registry-fetch/compare/v4.0.6...v4.0.7) (2020-08-17)
+
+
+### Bug Fixes
+
+* correct password redaction ([110032b](https://github.com/npm/registry-fetch/commit/110032b))
+
+
+
+<a name="4.0.6"></a>
+## [4.0.6](https://github.com/npm/registry-fetch/compare/v4.0.5...v4.0.6) (2020-08-14)
+
+
+### Bug Fixes
+
+* import URL from url module ([cd35987](https://github.com/npm/registry-fetch/commit/cd35987))
+
+
+
 <a name="4.0.5"></a>
 ## [4.0.5](https://github.com/npm/registry-fetch/compare/v4.0.4...v4.0.5) (2020-06-30)
 
diff --git a/node_modules/npm-registry-fetch/check-response.js b/node_modules/npm-registry-fetch/check-response.js
index 55139c93aff8d..79170a7fbdaf3 100644
--- a/node_modules/npm-registry-fetch/check-response.js
+++ b/node_modules/npm-registry-fetch/check-response.js
@@ -32,9 +32,12 @@ function logRequest (method, res, startTime, opts) {
 
   let urlStr
   try {
-    const URL = require('url')
+    const URL = require('url').URL
     const url = new URL(res.url)
-    urlStr = res.url.replace(url.password, '***')
+    if (url.password) {
+      url.password = '***'
+    }
+    urlStr = url.toString()
   } catch (er) {
     urlStr = res.url
   }
diff --git a/node_modules/npm-registry-fetch/package.json b/node_modules/npm-registry-fetch/package.json
index 8959c4c558a4d..a5ac4817ff51b 100644
--- a/node_modules/npm-registry-fetch/package.json
+++ b/node_modules/npm-registry-fetch/package.json
@@ -1,19 +1,19 @@
 {
-  "_from": "npm-registry-fetch@4.0.5",
-  "_id": "npm-registry-fetch@4.0.5",
+  "_from": "npm-registry-fetch@4.0.7",
+  "_id": "npm-registry-fetch@4.0.7",
   "_inBundle": false,
-  "_integrity": "sha512-yQ0/U4fYpCCqmueB2g8sc+89ckQ3eXpmU4+Yi2j5o/r0WkKvE2+Y0tK3DEILAtn2UaQTkjTHxIXe2/CSdit+/Q==",
+  "_integrity": "sha512-cny9v0+Mq6Tjz+e0erFAB+RYJ/AVGzkjnISiobqP8OWj9c9FLoZZu8/SPSKJWE17F1tk4018wfjV+ZbIbqC7fQ==",
   "_location": "/npm-registry-fetch",
   "_phantomChildren": {},
   "_requested": {
     "type": "version",
     "registry": true,
-    "raw": "npm-registry-fetch@4.0.5",
+    "raw": "npm-registry-fetch@4.0.7",
     "name": "npm-registry-fetch",
     "escapedName": "npm-registry-fetch",
-    "rawSpec": "4.0.5",
+    "rawSpec": "4.0.7",
     "saveSpec": null,
-    "fetchSpec": "4.0.5"
+    "fetchSpec": "4.0.7"
   },
   "_requiredBy": [
     "#USER",
@@ -28,10 +28,10 @@
     "/npm-profile",
     "/pacote"
   ],
-  "_resolved": "https://registry.npmjs.org/npm-registry-fetch/-/npm-registry-fetch-4.0.5.tgz",
-  "_shasum": "cb87cf7f25bfb048d6c3ee19d115bebf93ea5bfa",
-  "_spec": "npm-registry-fetch@4.0.5",
-  "_where": "/Users/claudiahdz/npm/cli",
+  "_resolved": "https://registry.npmjs.org/npm-registry-fetch/-/npm-registry-fetch-4.0.7.tgz",
+  "_shasum": "57951bf6541e0246b34c9f9a38ab73607c9449d7",
+  "_spec": "npm-registry-fetch@4.0.7",
+  "_where": "/Users/ruyadorno/Documents/workspace/cli/latest",
   "author": {
     "name": "Kat Marchán",
     "email": "kzm@sykosomatic.org"
@@ -95,12 +95,12 @@
   },
   "scripts": {
     "postrelease": "npm publish && git push --follow-tags",
+    "posttest": "standard",
     "prerelease": "npm t",
-    "pretest": "standard",
     "release": "standard-version -s",
     "test": "tap -J --coverage test/*.js",
     "update-coc": "weallbehave -o . && git add CODE_OF_CONDUCT.md && git commit -m 'docs(coc): updated CODE_OF_CONDUCT.md'",
     "update-contrib": "weallcontribute -o . && git add CONTRIBUTING.md && git commit -m 'docs(contributing): updated CONTRIBUTING.md'"
   },
-  "version": "4.0.5"
+  "version": "4.0.7"
 }
diff --git a/package-lock.json b/package-lock.json
index 378cadf0abc73..44f9d00785727 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1632,7 +1632,7 @@
       "dependencies": {
         "get-stream": {
           "version": "3.0.0",
-          "resolved": "https://registry.npmjs.org/get-stream/-/get-stream-3.0.0.tgz",
+          "resolved": "http://registry.npmjs.org/get-stream/-/get-stream-3.0.0.tgz",
           "integrity": "sha1-jpQ9E1jcN1VQVOy+LtsFqhdO3hQ="
         }
       }
@@ -2196,7 +2196,7 @@
       "dependencies": {
         "get-stream": {
           "version": "3.0.0",
-          "resolved": "https://registry.npmjs.org/get-stream/-/get-stream-3.0.0.tgz",
+          "resolved": "http://registry.npmjs.org/get-stream/-/get-stream-3.0.0.tgz",
           "integrity": "sha1-jpQ9E1jcN1VQVOy+LtsFqhdO3hQ="
         }
       }
@@ -3602,9 +3602,9 @@
       }
     },
     "npm-registry-fetch": {
-      "version": "4.0.5",
-      "resolved": "https://registry.npmjs.org/npm-registry-fetch/-/npm-registry-fetch-4.0.5.tgz",
-      "integrity": "sha512-yQ0/U4fYpCCqmueB2g8sc+89ckQ3eXpmU4+Yi2j5o/r0WkKvE2+Y0tK3DEILAtn2UaQTkjTHxIXe2/CSdit+/Q==",
+      "version": "4.0.7",
+      "resolved": "https://registry.npmjs.org/npm-registry-fetch/-/npm-registry-fetch-4.0.7.tgz",
+      "integrity": "sha512-cny9v0+Mq6Tjz+e0erFAB+RYJ/AVGzkjnISiobqP8OWj9c9FLoZZu8/SPSKJWE17F1tk4018wfjV+ZbIbqC7fQ==",
       "requires": {
         "JSONStream": "^1.3.4",
         "bluebird": "^3.5.1",
diff --git a/package.json b/package.json
index c018aaf9784b7..9b6a55ba4f25b 100644
--- a/package.json
+++ b/package.json
@@ -104,7 +104,7 @@
     "npm-packlist": "^1.4.8",
     "npm-pick-manifest": "^3.0.2",
     "npm-profile": "^4.0.4",
-    "npm-registry-fetch": "^4.0.5",
+    "npm-registry-fetch": "^4.0.7",
     "npm-user-validate": "~1.0.0",
     "npmlog": "~4.1.2",
     "once": "~1.4.0",