update dependencies

node_modules/electron-download/readme.md

@@ -57,17 +57,50 @@ ELECTRON_MIRROR="https://npm.taobao.org/mirrors/electron/"
 ## or for a local mirror
 ELECTRON_MIRROR="https://10.1.2.105/"
 ELECTRON_CUSTOM_DIR="our/internal/filePath"
+ELECTRON_CUSTOM_FILENAME="electron.zip"
 ```
 
 You can set ELECTRON_MIRROR in `.npmrc` as well, using the lowercase name:
 
 ```plain
 electron_mirror=https://10.1.2.105/
+electron_custom_dir="our/internal/filePath"
+electron_custom_filename="electron.zip"
 ```
 
+You can also set the same variables in your project's package.json:
+
+```json
+{
+    "name" : "my-electron-project",
+    "config" : {
+        "electron_mirror": "https://10.1.2.105/",
+        "electron_custom_dir": "our/internal/filePath",
+        "electron_custom_filename": "electron.zip"
+    }
+}
+```
+
+The order of precedence is:
+
+1. npm config or .npmrc, uppercase (`process.env.NPM_CONFIG_ELECTRON_*`)
+1. npm config or .npmrc, lowercase(`process.env.npm_config_electron_*`)
+1. package.json (`process.env.npm_package_config_electron_*`)
+1. environment variables (`process.env.ELECTRON_*`)
+1. the options given to `download`
+1. defaults
+
+You can also disable checksum validation if you really want to (this is in
+general a bad idea).  Do this by setting `disableChecksumSafetyCheck` to `true`
+in the options object.  Use this only when testing local build of Electron,
+if you have internal builds of Electron you should generate the SHASUMS file
+yourself and let `electron-download` still perform its hash validations.
+
 ### Cache location
 The location of the cache depends on the operating system, the defaults are:
 - Linux: `$XDG_CACHE_HOME` or `~/.cache/electron/`
 - MacOS: `~/Library/Caches/electron/`
 - Windows: `$LOCALAPPDATA/electron/Cache` or `~/AppData/Local/electron/Cache/`
 
+You can set the `ELECTRON_CACHE` environment variable to set cache location explicitly.
+