From e289c34b8fd16b5dd339b31f16387279f3ac48f1 Mon Sep 17 00:00:00 2001
From: Gar <gar+gh@danger.computer>
Date: Tue, 16 Apr 2024 14:31:38 -0700
Subject: [PATCH] fix: Remove table output from many commands

This removes table output from `hook`, `profile`, `doctor`, `org`, and `token`.
It also removes table output from the `--long` or `--dry-run` output of
install commands.

Table output is discouraged in a cli for accessibility reasons.

The tests for `token` were also rewritten because they did not actually test the behavior of npm with the registry.

`this.config` was also removed from `token`.  npm-registry-fetch pulls all this from flatOptions already.
---
 docs/lib/content/commands/npm-doctor.md       |  19 +-
 lib/commands/doctor.js                        |  97 +-
 lib/commands/hook.js                          |  38 +-
 lib/commands/org.js                           |  12 +-
 lib/commands/profile.js                       |   8 +-
 lib/commands/token.js                         | 113 +-
 lib/utils/reify-output.js                     |  51 +-
 mock-registry/lib/index.js                    |  25 +
 .../test/lib/commands/doctor.js.test.cjs      | 964 ++++++++++++------
 .../test/lib/commands/profile.js.test.cjs     |  13 -
 tap-snapshots/test/lib/docs.js.test.cjs       |   4 +-
 .../test/lib/utils/reify-output.js.test.cjs   |  14 +-
 test/lib/commands/hook.js                     |  38 +-
 test/lib/commands/login.js                    |   6 +-
 test/lib/commands/org.js                      |  20 +-
 test/lib/commands/profile.js                  |  17 -
 test/lib/commands/token.js                    | 675 +++++-------
 17 files changed, 1118 insertions(+), 996 deletions(-)

diff --git a/docs/lib/content/commands/npm-doctor.md b/docs/lib/content/commands/npm-doctor.md
index d43164eb3a5d3..b5c8126b272c0 100644
--- a/docs/lib/content/commands/npm-doctor.md
+++ b/docs/lib/content/commands/npm-doctor.md
@@ -34,20 +34,21 @@ there are any recommended changes, it will display them.  By default npm
 runs all of these checks. You can limit what checks are ran by
 specifying them as extra arguments.
 
-#### `npm ping`
+#### `Connecting to the registry`
 
 By default, npm installs from the primary npm registry,
-`registry.npmjs.org`.  `npm doctor` hits a special ping endpoint within the
-registry. This can also be checked with `npm ping`. If this check fails,
-you may be using a proxy that needs to be configured, or may need to talk
-to your IT staff to get access over HTTPS to `registry.npmjs.org`.
+`registry.npmjs.org`.  `npm doctor` hits a special connection testing
+endpoint within the registry. This can also be checked with `npm ping`.
+If this check fails, you may be using a proxy that needs to be
+configured, or may need to talk to your IT staff to get access over
+HTTPS to `registry.npmjs.org`.
 
 This check is done against whichever registry you've configured (you can
 see what that is by running `npm config get registry`), and if you're using
 a private registry that doesn't support the `/whoami` endpoint supported by
 the primary registry, this check may fail.
 
-#### `npm -v`
+#### `Checking npm version`
 
 While Node.js may come bundled with a particular version of npm, it's the
 policy of the CLI team that we recommend all users run `npm@latest` if they
@@ -57,7 +58,7 @@ support releases typically only receive critical security and regression
 fixes. The team believes that the latest tested version of npm is almost
 always likely to be the most functional and defect-free version of npm.
 
-#### `node -v`
+#### `Checking node version`
 
 For most users, in most circumstances, the best version of Node will be the
 latest long-term support (LTS) release. Those of you who want access to new
@@ -66,7 +67,7 @@ be running a newer version, and some may be required to run an older
 version of Node because of enterprise change control policies. That's OK!
 But in general, the npm team recommends that most users run Node.js LTS.
 
-#### `npm config get registry`
+#### `Checking configured npm registry`
 
 You may be installing from private package registries for your project or
 company. That's great! Others may be following tutorials or StackOverflow
@@ -75,7 +76,7 @@ Sometimes, this may entail changing the registry you're pointing at.  This
 part of `npm doctor` just lets you, and maybe whoever's helping you with
 support, know that you're not using the default registry.
 
-#### `which git`
+#### `Checking for git executable in PATH`
 
 While it's documented in the README, it may not be obvious that npm needs
 Git installed to do many of the things that it does. Also, in some cases
diff --git a/lib/commands/doctor.js b/lib/commands/doctor.js
index f74fe2ecbcc7e..3048a123d6eb1 100644
--- a/lib/commands/doctor.js
+++ b/lib/commands/doctor.js
@@ -1,7 +1,6 @@
 const cacache = require('cacache')
 const fs = require('fs')
 const fetch = require('make-fetch-happen')
-const Table = require('cli-table3')
 const which = require('which')
 const pacote = require('pacote')
 const { resolve } = require('path')
@@ -34,57 +33,59 @@ const maskLabel = mask => {
 
 const subcommands = [
   {
-    groups: ['ping', 'registry'],
-    title: 'npm ping',
+    // Ping is left in as a legacy command but is listed as "connection" to
+    // make more sense to more people
+    groups: ['connection', 'ping', 'registry'],
+    title: 'Connecting to the registry',
     cmd: 'checkPing',
   }, {
     groups: ['versions'],
-    title: 'npm -v',
+    title: 'Checking npm version',
     cmd: 'getLatestNpmVersion',
   }, {
     groups: ['versions'],
-    title: 'node -v',
+    title: 'Checking node version',
     cmd: 'getLatestNodejsVersion',
   }, {
     groups: ['registry'],
-    title: 'npm config get registry',
+    title: 'Checking configured npm registry',
     cmd: 'checkNpmRegistry',
   }, {
     groups: ['environment'],
-    title: 'git executable in PATH',
+    title: 'Checking for git executable in PATH',
     cmd: 'getGitPath',
   }, {
     groups: ['environment'],
-    title: 'global bin folder in PATH',
+    title: 'Checking for global bin folder in PATH',
     cmd: 'getBinPath',
   }, {
     groups: ['permissions', 'cache'],
-    title: 'Perms check on cached files',
+    title: 'Checking permissions on cached files (this may take awhile)',
     cmd: 'checkCachePermission',
     windows: false,
   }, {
     groups: ['permissions'],
-    title: 'Perms check on local node_modules',
+    title: 'Checking permissions on local node_modules (this may take awhile)',
     cmd: 'checkLocalModulesPermission',
     windows: false,
   }, {
     groups: ['permissions'],
-    title: 'Perms check on global node_modules',
+    title: 'Checking permissions on global node_modules (this may take awhile)',
     cmd: 'checkGlobalModulesPermission',
     windows: false,
   }, {
     groups: ['permissions'],
-    title: 'Perms check on local bin folder',
+    title: 'Checking permissions on local bin folder',
     cmd: 'checkLocalBinPermission',
     windows: false,
   }, {
     groups: ['permissions'],
-    title: 'Perms check on global bin folder',
+    title: 'Checking permissions on global bin folder',
     cmd: 'checkGlobalBinPermission',
     windows: false,
   }, {
     groups: ['cache'],
-    title: 'Verify cache contents',
+    title: 'Verifying cache contents (this may take awhile)',
     cmd: 'verifyCachedFiles',
     windows: false,
   },
@@ -104,43 +105,28 @@ class Doctor extends BaseCommand {
   static params = ['registry']
   static ignoreImplicitWorkspace = false
   static usage = [`[${subcommands.flatMap(s => s.groups)
-    .filter((value, index, self) => self.indexOf(value) === index)
+    .filter((value, index, self) => self.indexOf(value) === index && value !== 'ping')
     .join('] [')}]`]
 
   static subcommands = subcommands
 
-  // minimum width of check column, enough for the word `Check`
-  #checkWidth = 5
-
   async exec (args) {
     log.info('doctor', 'Running checkup')
     let allOk = true
 
     const actions = this.actions(args)
-    this.#checkWidth = actions.reduce((length, item) =>
-      Math.max(item.title.length, length), this.#checkWidth)
 
-    if (!this.npm.silent) {
-      this.output(['Check', 'Value', 'Recommendation/Notes'].map(h => this.npm.chalk.underline(h)))
-    }
-    // Do the actual work
+    const chalk = this.npm.chalk
     for (const { title, cmd } of actions) {
-      const item = [title]
+      this.output(title)
+      // TODO when we have an in progress indicator that could go here
+      let result
       try {
-        item.push(true, await this[cmd]())
+        result = await this[cmd]()
+        this.output(`${chalk.green('Ok')}${result ? `\n${result}` : ''}\n`)
       } catch (err) {
-        item.push(false, err)
-      }
-      if (!item[1]) {
         allOk = false
-        item[0] = this.npm.chalk.red(item[0])
-        item[1] = this.npm.chalk.red('not ok')
-        item[2] = this.npm.chalk.cyan(String(item[2]))
-      } else {
-        item[1] = this.npm.chalk.green('ok')
-      }
-      if (!this.npm.silent) {
-        this.output(item)
+        this.output(`${chalk.red('Not ok')}\n${chalk.cyan(err)}\n`)
       }
     }
 
@@ -343,38 +329,11 @@ class Doctor extends BaseCommand {
     }
   }
 
-  output (row) {
-    const t = new Table({
-      chars: {
-        top: '',
-        'top-mid': '',
-        'top-left': '',
-        'top-right': '',
-        bottom: '',
-        'bottom-mid': '',
-        'bottom-left': '',
-        'bottom-right': '',
-        left: '',
-        'left-mid': '',
-        mid: '',
-        'mid-mid': '',
-        right: '',
-        'right-mid': '',
-        middle: '  ',
-      },
-      style: {
-        'padding-left': 0,
-        'padding-right': 0,
-        // setting border here is not necessary visually since we've already
-        // zeroed out all the chars above, but without it cli-table3 will wrap
-        // some of the separator spaces with ansi codes which show up in
-        // snapshots.
-        border: 0,
-      },
-      colWidths: [this.#checkWidth, 6],
-    })
-    t.push(row)
-    output.standard(t.toString())
+  output (...args) {
+    // TODO display layer should do this
+    if (!this.npm.silent) {
+      output.standard(...args)
+    }
   }
 
   actions (params) {
diff --git a/lib/commands/hook.js b/lib/commands/hook.js
index 5e6b593cccfd6..7ec95e079d660 100644
--- a/lib/commands/hook.js
+++ b/lib/commands/hook.js
@@ -1,7 +1,6 @@
 const hookApi = require('libnpmhook')
 const otplease = require('../utils/otplease.js')
 const relativeDate = require('tiny-relative-date')
-const Table = require('cli-table3')
 const { output } = require('proc-log')
 
 const BaseCommand = require('../base-command.js')
@@ -52,6 +51,7 @@ class Hook extends BaseCommand {
 
   async ls (pkg, opts) {
     const hooks = await hookApi.ls({ ...opts, package: pkg })
+
     if (opts.json) {
       output.standard(JSON.stringify(hooks, null, 2))
     } else if (opts.parseable) {
@@ -62,32 +62,18 @@ class Hook extends BaseCommand {
     } else if (!hooks.length) {
       output.standard("You don't have any hooks configured yet.")
     } else if (!this.npm.silent) {
-      if (hooks.length === 1) {
-        output.standard('You have one hook configured.')
-      } else {
-        output.standard(`You have ${hooks.length} hooks configured.`)
-      }
+      output.standard(`You have ${hooks.length} hook${hooks.length !== 1 ? 's' : ''} configured.`)
 
-      const table = new Table({ head: ['id', 'target', 'endpoint'] })
-      hooks.forEach((hook) => {
-        table.push([
-          { rowSpan: 2, content: hook.id },
-          this.hookName(hook),
-          hook.endpoint,
-        ])
+      for (const hook of hooks) {
+        output.standard(`Hook ${hook.id}: ${this.hookName(hook)}`)
+        output.standard(`Endpoint: ${hook.endpoint}`)
         if (hook.last_delivery) {
-          table.push([
-            {
-              colSpan: 1,
-              content: `triggered ${relativeDate(hook.last_delivery)}`,
-            },
-            hook.response_code,
-          ])
+          /* eslint-disable-next-line max-len */
+          output.standard(`Triggered ${relativeDate(hook.last_delivery)}, response code was "${hook.response_code}"\n`)
         } else {
-          table.push([{ colSpan: 2, content: 'never triggered' }])
+          output.standard('Never triggered\n')
         }
-      })
-      output.standard(table.toString())
+      }
     }
   }
 
@@ -116,11 +102,7 @@ class Hook extends BaseCommand {
   }
 
   hookName (hook) {
-    let target = hook.name
-    if (hook.type === 'owner') {
-      target = '~' + target
-    }
-    return target
+    return `${hook.type === 'owner' ? '~' : ''}${hook.name}`
   }
 }
 module.exports = Hook
diff --git a/lib/commands/org.js b/lib/commands/org.js
index 8881ded70f638..f1e5b0e09c62c 100644
--- a/lib/commands/org.js
+++ b/lib/commands/org.js
@@ -1,6 +1,5 @@
 const liborg = require('libnpmorg')
 const otplease = require('../utils/otplease.js')
-const Table = require('cli-table3')
 const BaseCommand = require('../base-command.js')
 const { output } = require('proc-log')
 
@@ -143,13 +142,10 @@ class Org extends BaseCommand {
         output.standard([u, roster[u]].join('\t'))
       })
     } else if (!this.npm.silent) {
-      const table = new Table({ head: ['user', 'role'] })
-      Object.keys(roster)
-        .sort()
-        .forEach(u => {
-          table.push([u, roster[u]])
-        })
-      output.standard(table.toString())
+      const chalk = this.npm.chalk
+      for (const u of Object.keys(roster).sort()) {
+        output.standard(`${u} - ${chalk.cyan(roster[u])}`)
+      }
     }
   }
 }
diff --git a/lib/commands/profile.js b/lib/commands/profile.js
index 98a8dcd050ee9..8bb19e69fd484 100644
--- a/lib/commands/profile.js
+++ b/lib/commands/profile.js
@@ -3,7 +3,6 @@ const { URL } = require('url')
 const { log, output } = require('proc-log')
 const npmProfile = require('npm-profile')
 const qrcodeTerminal = require('qrcode-terminal')
-const Table = require('cli-table3')
 
 const otplease = require('../utils/otplease.js')
 const readUserInfo = require('../utils/read-user-info.js')
@@ -153,12 +152,9 @@ class Profile extends BaseCommand {
           }
         }
       } else {
-        const table = new Table()
-        for (const key of Object.keys(cleaned)) {
-          table.push({ [this.npm.chalk.bold(key)]: cleaned[key] })
+        for (const [key, value] of Object.entries(cleaned)) {
+          output.standard(`${key}: ${value}`)
         }
-
-        output.standard(table.toString())
       }
     }
   }
diff --git a/lib/commands/token.js b/lib/commands/token.js
index 991112d1bc1ba..eee061621226d 100644
--- a/lib/commands/token.js
+++ b/lib/commands/token.js
@@ -1,4 +1,3 @@
-const Table = require('cli-table3')
 const { log, output } = require('proc-log')
 const profile = require('npm-profile')
 
@@ -34,10 +33,10 @@ class Token extends BaseCommand {
       case 'list':
       case 'ls':
         return this.list()
+      case 'rm':
       case 'delete':
       case 'revoke':
       case 'remove':
-      case 'rm':
         return this.rm(args.slice(1))
       case 'create':
         return this.create(args.slice(1))
@@ -47,13 +46,15 @@ class Token extends BaseCommand {
   }
 
   async list () {
-    const conf = this.config()
+    const json = this.npm.config.get('json')
+    const parseable = this.npm.config.get('parseable')
     log.info('token', 'getting list')
-    const tokens = await profile.listTokens(conf)
-    if (conf.json) {
+    const tokens = await profile.listTokens(this.npm.flatOptions)
+    if (json) {
       output.standard(JSON.stringify(tokens, null, 2))
       return
-    } else if (conf.parseable) {
+    }
+    if (parseable) {
       output.standard(['key', 'token', 'created', 'readonly', 'CIDR whitelist'].join('\t'))
       tokens.forEach(token => {
         output.standard(
@@ -69,21 +70,17 @@ class Token extends BaseCommand {
       return
     }
     this.generateTokenIds(tokens, 6)
-    const idWidth = tokens.reduce((acc, token) => Math.max(acc, token.id.length), 0)
-    const table = new Table({
-      head: ['id', 'token', 'created', 'readonly', 'CIDR whitelist'],
-      colWidths: [Math.max(idWidth, 2) + 2, 9, 12, 10],
-    })
-    tokens.forEach(token => {
-      table.push([
-        token.id,
-        token.token + '…',
-        String(token.created).slice(0, 10),
-        token.readonly ? 'yes' : 'no',
-        token.cidr_whitelist ? token.cidr_whitelist.join(', ') : '',
-      ])
-    })
-    output.standard(table.toString())
+    const chalk = this.npm.chalk
+    for (const token of tokens) {
+      const level = token.readonly ? 'Read only token' : 'Publish token'
+      const created = String(token.created).slice(0, 10)
+      /* eslint-disable-next-line max-len */
+      output.standard(`${chalk.blue(level)} ${token.token}… with id ${chalk.cyan(token.id)} created ${created}`)
+      if (token.cidr_whitelist) {
+        output.standard(`with IP whitelist: ${chalk.green(token.cidr_whitelist.join(','))}`)
+      }
+      output.standard()
+    }
   }
 
   async rm (args) {
@@ -91,10 +88,12 @@ class Token extends BaseCommand {
       throw this.usageError('`<tokenKey>` argument is required.')
     }
 
-    const conf = this.config()
+    const json = this.npm.config.get('json')
+    const parseable = this.npm.config.get('parseable')
     const toRemove = []
+    const opts = { ...this.npm.flatOptions }
     log.info('token', `removing ${toRemove.length} tokens`)
-    const tokens = await profile.listTokens(conf)
+    const tokens = await profile.listTokens(opts)
     args.forEach(id => {
       const matches = tokens.filter(token => token.key.indexOf(id) === 0)
       if (matches.length === 1) {
@@ -115,12 +114,12 @@ class Token extends BaseCommand {
     })
     await Promise.all(
       toRemove.map(key => {
-        return otplease(this.npm, conf, c => profile.removeToken(key, c))
+        return otplease(this.npm, opts, c => profile.removeToken(key, c))
       })
     )
-    if (conf.json) {
+    if (json) {
       output.standard(JSON.stringify(toRemove))
-    } else if (conf.parseable) {
+    } else if (parseable) {
       output.standard(toRemove.join('\t'))
     } else {
       output.standard('Removed ' + toRemove.length + ' token' + (toRemove.length !== 1 ? 's' : ''))
@@ -128,61 +127,34 @@ class Token extends BaseCommand {
   }
 
   async create (args) {
-    const conf = this.config()
-    const cidr = conf.cidr
-    const readonly = conf.readOnly
+    const json = this.npm.config.get('json')
+    const parseable = this.npm.config.get('parseable')
+    const cidr = this.npm.config.get('cidr')
+    const readonly = this.npm.config.get('read-only')
 
-    const password = await readUserInfo.password()
     const validCIDR = await this.validateCIDRList(cidr)
+    const password = await readUserInfo.password()
     log.info('token', 'creating')
     const result = await otplease(
       this.npm,
-      conf,
+      { ...this.npm.flatOptions },
       c => profile.createToken(password, readonly, validCIDR, c)
     )
     delete result.key
     delete result.updated
-    if (conf.json) {
+    if (json) {
       output.standard(JSON.stringify(result))
-    } else if (conf.parseable) {
+    } else if (parseable) {
       Object.keys(result).forEach(k => output.standard(k + '\t' + result[k]))
     } else {
-      const table = new Table()
-      for (const k of Object.keys(result)) {
-        table.push({ [this.npm.chalk.bold(k)]: String(result[k]) })
-      }
-      output.standard(table.toString())
-    }
-  }
-
-  config () {
-    const conf = { ...this.npm.flatOptions }
-    const creds = this.npm.config.getCredentialsByURI(conf.registry)
-    if (creds.token) {
-      conf.auth = { token: creds.token }
-    } else if (creds.username) {
-      conf.auth = {
-        basic: {
-          username: creds.username,
-          password: creds.password,
-        },
+      const chalk = this.npm.chalk
+      // Identical to list
+      const level = result.readonly ? 'read only' : 'publish'
+      output.standard(`Created ${chalk.blue(level)} token ${result.token}…`)
+      if (result.cidr_whitelist?.length) {
+        output.standard(`with IP whitelist: ${chalk.green(result.cidr_whitelist.join(','))}`)
       }
-    } else if (creds.auth) {
-      const auth = Buffer.from(creds.auth, 'base64').toString().split(':', 2)
-      conf.auth = {
-        basic: {
-          username: auth[0],
-          password: auth[1],
-        },
-      }
-    } else {
-      conf.auth = {}
-    }
-
-    if (conf.otp) {
-      conf.auth.otp = conf.otp
     }
-    return conf
   }
 
   invalidCIDRError (msg) {
@@ -190,7 +162,6 @@ class Token extends BaseCommand {
   }
 
   generateTokenIds (tokens, minLength) {
-    const byId = {}
     for (const token of tokens) {
       token.id = token.key
       for (let ii = minLength; ii < token.key.length; ++ii) {
@@ -202,9 +173,7 @@ class Token extends BaseCommand {
           break
         }
       }
-      byId[token.id] = token
     }
-    return byId
   }
 
   async validateCIDRList (cidrs) {
@@ -214,12 +183,12 @@ class Token extends BaseCommand {
     for (const cidr of list) {
       if (isCidrV6(cidr)) {
         throw this.invalidCIDRError(
-          'CIDR whitelist can only contain IPv4 addresses, ' + cidr + ' is IPv6'
+          `CIDR whitelist can only contain IPv4 addresses${cidr} is IPv6`
         )
       }
 
       if (!isCidrV4(cidr)) {
-        throw this.invalidCIDRError('CIDR whitelist contains invalid CIDR entry: ' + cidr)
+        throw this.invalidCIDRError(`CIDR whitelist contains invalid CIDR entry: ${cidr}`)
       }
     }
     return list
diff --git a/lib/utils/reify-output.js b/lib/utils/reify-output.js
index 40f1722f246e9..a858a546c4010 100644
--- a/lib/utils/reify-output.js
+++ b/lib/utils/reify-output.js
@@ -15,7 +15,6 @@ const ms = require('ms')
 const npmAuditReport = require('npm-audit-report')
 const { readTree: getFundingInfo } = require('libnpmfund')
 const auditError = require('./audit-error.js')
-const Table = require('cli-table3')
 
 // TODO: output JSON if flatOptions.json is true
 const reifyOutput = (npm, arb) => {
@@ -42,51 +41,31 @@ const reifyOutput = (npm, arb) => {
   }
 
   if (diff) {
-    let diffTable
-    if (npm.config.get('dry-run') || npm.config.get('long')) {
-      diffTable = new Table({
-        chars: {
-          top: '',
-          'top-mid': '',
-          'top-left': '',
-          'top-right': '',
-          bottom: '',
-          'bottom-mid': '',
-          'bottom-left': '',
-          'bottom-right': '',
-          left: '',
-          'left-mid': '',
-          mid: '',
-          'mid-mid': '',
-          right: '',
-          'right-mid': '',
-          middle: '  ',
-        },
-        style: {
-          'padding-left': 0,
-          'padding-right': 0,
-          border: 0,
-        },
-      })
-    }
+    const showDiff = npm.config.get('dry-run') || npm.config.get('long')
+    const chalk = npm.chalk
 
     depth({
       tree: diff,
       visit: d => {
         switch (d.action) {
           case 'REMOVE':
-            diffTable?.push(['remove', d.actual.name, d.actual.package.version])
+            if (showDiff) {
+              /* eslint-disable-next-line max-len */
+              output.standard(`${chalk.blue('remove')} ${d.actual.name} ${d.actual.package.version}`)
+            }
             summary.removed++
             break
           case 'ADD':
-            diffTable?.push(['add', d.ideal.name, d.ideal.package.version])
+            if (showDiff) {
+              output.standard(`${chalk.green('add')} ${d.ideal.name} ${d.ideal.package.version}`)
+            }
             actualTree.inventory.has(d.ideal) && summary.added++
             break
           case 'CHANGE':
-            diffTable?.push(['change',
-              d.actual.name,
-              d.actual.package.version + ' -> ' + d.ideal.package.version,
-            ])
+            if (showDiff) {
+              /* eslint-disable-next-line max-len */
+              output.standard(`${chalk.cyan('change')} ${d.actual.name} ${d.actual.package.version} => ${d.ideal.package.version}`)
+            }
             summary.changed++
             break
           default:
@@ -97,10 +76,6 @@ const reifyOutput = (npm, arb) => {
       },
       getChildren: d => d.children,
     })
-
-    if (diffTable) {
-      output.standard('\n' + diffTable.toString())
-    }
   }
 
   if (npm.flatOptions.fund) {
diff --git a/mock-registry/lib/index.js b/mock-registry/lib/index.js
index 8664ac56fbefb..d98cb055a1713 100644
--- a/mock-registry/lib/index.js
+++ b/mock-registry/lib/index.js
@@ -334,6 +334,31 @@ class MockRegistry {
     this.nock = nock
   }
 
+  getTokens (tokens) {
+    return this.nock.get('/-/npm/v1/tokens')
+      .reply(200, {
+        objects: tokens,
+        urls: {},
+        total: tokens.length,
+        userHasOldFormatToken: false,
+      })
+  }
+
+  createToken ({ password, readonly = false, cidr = [] }) {
+    return this.nock.post('/-/npm/v1/tokens', {
+      password,
+      readonly,
+      cidr_whitelist: cidr,
+    }).reply(200, {
+      key: 'n3wk3y',
+      token: 'n3wt0k3n',
+      created: new Date(),
+      updated: new Date(),
+      readonly,
+      cidr_whitelist: cidr,
+    })
+  }
+
   async package ({ manifest, times = 1, query, tarballs }) {
     let nock = this.nock
     const spec = npa(manifest.name)
diff --git a/tap-snapshots/test/lib/commands/doctor.js.test.cjs b/tap-snapshots/test/lib/commands/doctor.js.test.cjs
index ded43c37a693f..985d76e5d12a5 100644
--- a/tap-snapshots/test/lib/commands/doctor.js.test.cjs
+++ b/tap-snapshots/test/lib/commands/doctor.js.test.cjs
@@ -30,35 +30,69 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP all clear > output 1`] = `
-Check                               Value   Recommendation/Notes
-npm ping                            ok       
-npm -v                              ok      current: v1.0.0, latest: v1.0.0
-node -v                             ok      current: v1.0.0, recommended: v1.0.0
-npm config get registry             ok      using default registry (https://registry.npmjs.org/)
-git executable in PATH              ok      /path/to/git
-global bin folder in PATH           ok      {CWD}/global/bin
-Perms check on cached files         ok       
-Perms check on local node_modules   ok       
-Perms check on global node_modules  ok       
-Perms check on local bin folder     ok       
-Perms check on global bin folder    ok       
-Verify cache contents               ok      verified 0 tarballs
+Connecting to the registry
+Ok
+Checking npm version
+Ok
+current: v1.0.0, latest: v1.0.0
+Checking node version
+Ok
+current: v1.0.0, recommended: v1.0.0
+Checking configured npm registry
+Ok
+using default registry (https://registry.npmjs.org/)
+Checking for git executable in PATH
+Ok
+/path/to/git
+Checking for global bin folder in PATH
+Ok
+{CWD}/global/bin
+Checking permissions on cached files (this may take awhile)
+Ok
+Checking permissions on local node_modules (this may take awhile)
+Ok
+Checking permissions on global node_modules (this may take awhile)
+Ok
+Checking permissions on local bin folder
+Ok
+Checking permissions on global bin folder
+Ok
+Verifying cache contents (this may take awhile)
+Ok
+verified 0 tarballs
 `
 
 exports[`test/lib/commands/doctor.js TAP all clear in color > everything is ok in color 1`] = `
-Check                               Value   Recommendation/Notes
-npm ping                            ok       
-npm -v                              ok      current: v1.0.0, latest: v1.0.0
-node -v                             ok      current: v1.0.0, recommended: v1.0.0
-npm config get registry             ok      using default registry (https://registry.npmjs.org/)
-git executable in PATH              ok      /path/to/git
-global bin folder in PATH           ok      {CWD}/global/bin
-Perms check on cached files         ok       
-Perms check on local node_modules   ok       
-Perms check on global node_modules  ok       
-Perms check on local bin folder     ok       
-Perms check on global bin folder    ok       
-Verify cache contents               ok      verified 0 tarballs
+Connecting to the registry
+Ok
+Checking npm version
+Ok
+current: v1.0.0, latest: v1.0.0
+Checking node version
+Ok
+current: v1.0.0, recommended: v1.0.0
+Checking configured npm registry
+Ok
+using default registry (https://registry.npmjs.org/)
+Checking for git executable in PATH
+Ok
+/path/to/git
+Checking for global bin folder in PATH
+Ok
+{CWD}/global/bin
+Checking permissions on cached files (this may take awhile)
+Ok
+Checking permissions on local node_modules (this may take awhile)
+Ok
+Checking permissions on global node_modules (this may take awhile)
+Ok
+Checking permissions on local bin folder
+Ok
+Checking permissions on global bin folder
+Ok
+Verifying cache contents (this may take awhile)
+Ok
+verified 0 tarballs
 `
 
 exports[`test/lib/commands/doctor.js TAP all clear in color > logs 1`] = `
@@ -110,35 +144,70 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP bad proxy > output 1`] = `
-Check                               Value   Recommendation/Notes
-npm ping                            not ok  Invalid protocol \`ssh:\` connecting to proxy \`npmjs.org\`
-npm -v                              not ok  Error: Invalid protocol \`ssh:\` connecting to proxy \`npmjs.org\`
-node -v                             not ok  Error: Invalid protocol \`ssh:\` connecting to proxy \`npmjs.org\`
-npm config get registry             ok      using default registry (https://registry.npmjs.org/)
-git executable in PATH              ok      /path/to/git
-global bin folder in PATH           ok      {CWD}/global/bin
-Perms check on cached files         ok       
-Perms check on local node_modules   ok       
-Perms check on global node_modules  ok       
-Perms check on local bin folder     ok       
-Perms check on global bin folder    ok       
-Verify cache contents               ok      verified 0 tarballs
+Connecting to the registry
+Not ok
+Invalid protocol \`ssh:\` connecting to proxy \`npmjs.org\`
+Checking npm version
+Not ok
+Error: Invalid protocol \`ssh:\` connecting to proxy \`npmjs.org\`
+Checking node version
+Not ok
+Error: Invalid protocol \`ssh:\` connecting to proxy \`npmjs.org\`
+Checking configured npm registry
+Ok
+using default registry (https://registry.npmjs.org/)
+Checking for git executable in PATH
+Ok
+/path/to/git
+Checking for global bin folder in PATH
+Ok
+{CWD}/global/bin
+Checking permissions on cached files (this may take awhile)
+Ok
+Checking permissions on local node_modules (this may take awhile)
+Ok
+Checking permissions on global node_modules (this may take awhile)
+Ok
+Checking permissions on local bin folder
+Ok
+Checking permissions on global bin folder
+Ok
+Verifying cache contents (this may take awhile)
+Ok
+verified 0 tarballs
 `
 
 exports[`test/lib/commands/doctor.js TAP cacache badContent > corrupted cache content 1`] = `
-Check                               Value   Recommendation/Notes
-npm ping                            ok       
-npm -v                              ok      current: v1.0.0, latest: v1.0.0
-node -v                             ok      current: v1.0.0, recommended: v1.0.0
-npm config get registry             ok      using default registry (https://registry.npmjs.org/)
-git executable in PATH              ok      /path/to/git
-global bin folder in PATH           ok      {CWD}/global/bin
-Perms check on cached files         ok       
-Perms check on local node_modules   ok       
-Perms check on global node_modules  ok       
-Perms check on local bin folder     ok       
-Perms check on global bin folder    ok       
-Verify cache contents               ok      verified 2 tarballs
+Connecting to the registry
+Ok
+Checking npm version
+Ok
+current: v1.0.0, latest: v1.0.0
+Checking node version
+Ok
+current: v1.0.0, recommended: v1.0.0
+Checking configured npm registry
+Ok
+using default registry (https://registry.npmjs.org/)
+Checking for git executable in PATH
+Ok
+/path/to/git
+Checking for global bin folder in PATH
+Ok
+{CWD}/global/bin
+Checking permissions on cached files (this may take awhile)
+Ok
+Checking permissions on local node_modules (this may take awhile)
+Ok
+Checking permissions on global node_modules (this may take awhile)
+Ok
+Checking permissions on local bin folder
+Ok
+Checking permissions on global bin folder
+Ok
+Verifying cache contents (this may take awhile)
+Ok
+verified 2 tarballs
 `
 
 exports[`test/lib/commands/doctor.js TAP cacache badContent > logs 1`] = `
@@ -196,35 +265,69 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP cacache missingContent > missing content 1`] = `
-Check                               Value   Recommendation/Notes
-npm ping                            ok       
-npm -v                              ok      current: v1.0.0, latest: v1.0.0
-node -v                             ok      current: v1.0.0, recommended: v1.0.0
-npm config get registry             ok      using default registry (https://registry.npmjs.org/)
-git executable in PATH              ok      /path/to/git
-global bin folder in PATH           ok      {CWD}/global/bin
-Perms check on cached files         ok       
-Perms check on local node_modules   ok       
-Perms check on global node_modules  ok       
-Perms check on local bin folder     ok       
-Perms check on global bin folder    ok       
-Verify cache contents               ok      verified 2 tarballs
+Connecting to the registry
+Ok
+Checking npm version
+Ok
+current: v1.0.0, latest: v1.0.0
+Checking node version
+Ok
+current: v1.0.0, recommended: v1.0.0
+Checking configured npm registry
+Ok
+using default registry (https://registry.npmjs.org/)
+Checking for git executable in PATH
+Ok
+/path/to/git
+Checking for global bin folder in PATH
+Ok
+{CWD}/global/bin
+Checking permissions on cached files (this may take awhile)
+Ok
+Checking permissions on local node_modules (this may take awhile)
+Ok
+Checking permissions on global node_modules (this may take awhile)
+Ok
+Checking permissions on local bin folder
+Ok
+Checking permissions on global bin folder
+Ok
+Verifying cache contents (this may take awhile)
+Ok
+verified 2 tarballs
 `
 
 exports[`test/lib/commands/doctor.js TAP cacache reclaimedCount > content garbage collected 1`] = `
-Check                               Value   Recommendation/Notes
-npm ping                            ok       
-npm -v                              ok      current: v1.0.0, latest: v1.0.0
-node -v                             ok      current: v1.0.0, recommended: v1.0.0
-npm config get registry             ok      using default registry (https://registry.npmjs.org/)
-git executable in PATH              ok      /path/to/git
-global bin folder in PATH           ok      {CWD}/global/bin
-Perms check on cached files         ok       
-Perms check on local node_modules   ok       
-Perms check on global node_modules  ok       
-Perms check on local bin folder     ok       
-Perms check on global bin folder    ok       
-Verify cache contents               ok      verified 2 tarballs
+Connecting to the registry
+Ok
+Checking npm version
+Ok
+current: v1.0.0, latest: v1.0.0
+Checking node version
+Ok
+current: v1.0.0, recommended: v1.0.0
+Checking configured npm registry
+Ok
+using default registry (https://registry.npmjs.org/)
+Checking for git executable in PATH
+Ok
+/path/to/git
+Checking for global bin folder in PATH
+Ok
+{CWD}/global/bin
+Checking permissions on cached files (this may take awhile)
+Ok
+Checking permissions on local node_modules (this may take awhile)
+Ok
+Checking permissions on global node_modules (this may take awhile)
+Ok
+Checking permissions on local bin folder
+Ok
+Checking permissions on global bin folder
+Ok
+Verifying cache contents (this may take awhile)
+Ok
+verified 2 tarballs
 `
 
 exports[`test/lib/commands/doctor.js TAP cacache reclaimedCount > logs 1`] = `
@@ -274,9 +377,11 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP discrete checks cache > output 1`] = `
-Check                        Value   Recommendation/Notes
-Perms check on cached files  ok       
-Verify cache contents        ok      verified 0 tarballs
+Checking permissions on cached files (this may take awhile)
+Ok
+Verifying cache contents (this may take awhile)
+Ok
+verified 0 tarballs
 `
 
 exports[`test/lib/commands/doctor.js TAP discrete checks git > logs 1`] = `
@@ -290,7 +395,7 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP discrete checks git > output 1`] = `
-Check  Value   Recommendation/Notes
+
 `
 
 exports[`test/lib/commands/doctor.js TAP discrete checks invalid environment > logs 1`] = `
@@ -306,9 +411,12 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP discrete checks invalid environment > output 1`] = `
-Check                      Value   Recommendation/Notes
-git executable in PATH     ok      /path/to/git
-global bin folder in PATH  not ok  Error: Add {CWD}/global/bin to your $PATH
+Checking for git executable in PATH
+Ok
+/path/to/git
+Checking for global bin folder in PATH
+Not ok
+Error: Add {CWD}/global/bin to your $PATH
 `
 
 exports[`test/lib/commands/doctor.js TAP discrete checks permissions - not windows > logs 1`] = `
@@ -322,12 +430,16 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP discrete checks permissions - not windows > output 1`] = `
-Check                               Value   Recommendation/Notes
-Perms check on cached files         ok       
-Perms check on local node_modules   ok       
-Perms check on global node_modules  ok       
-Perms check on local bin folder     ok       
-Perms check on global bin folder    ok       
+Checking permissions on cached files (this may take awhile)
+Ok
+Checking permissions on local node_modules (this may take awhile)
+Ok
+Checking permissions on global node_modules (this may take awhile)
+Ok
+Checking permissions on local bin folder
+Ok
+Checking permissions on global bin folder
+Ok
 `
 
 exports[`test/lib/commands/doctor.js TAP discrete checks permissions - windows > logs 1`] = `
@@ -341,7 +453,7 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP discrete checks permissions - windows > output 1`] = `
-Check  Value   Recommendation/Notes
+
 `
 
 exports[`test/lib/commands/doctor.js TAP discrete checks ping > logs 1`] = `
@@ -356,8 +468,8 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP discrete checks ping > output 1`] = `
-Check     Value   Recommendation/Notes
-npm ping  ok       
+Connecting to the registry
+Ok
 `
 
 exports[`test/lib/commands/doctor.js TAP discrete checks registry > logs 1`] = `
@@ -372,9 +484,11 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP discrete checks registry > output 1`] = `
-Check                    Value   Recommendation/Notes
-npm ping                 ok       
-npm config get registry  ok      using default registry (https://registry.npmjs.org/)
+Connecting to the registry
+Ok
+Checking configured npm registry
+Ok
+using default registry (https://registry.npmjs.org/)
 `
 
 exports[`test/lib/commands/doctor.js TAP discrete checks versions > logs 1`] = `
@@ -390,9 +504,12 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP discrete checks versions > output 1`] = `
-Check    Value   Recommendation/Notes
-npm -v   ok      current: v1.0.0, latest: v1.0.0
-node -v  ok      current: v1.0.0, recommended: v1.0.0
+Checking npm version
+Ok
+current: v1.0.0, latest: v1.0.0
+Checking node version
+Ok
+current: v1.0.0, recommended: v1.0.0
 `
 
 exports[`test/lib/commands/doctor.js TAP error reading directory > logs 1`] = `
@@ -426,35 +543,75 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP error reading directory > readdir error 1`] = `
-Check                               Value   Recommendation/Notes
-npm ping                            ok       
-npm -v                              ok      current: v1.0.0, latest: v1.0.0
-node -v                             ok      current: v1.0.0, recommended: v1.0.0
-npm config get registry             ok      using default registry (https://registry.npmjs.org/)
-git executable in PATH              ok      /path/to/git
-global bin folder in PATH           ok      {CWD}/global/bin
-Perms check on cached files         not ok  Check the permissions of files in {CWD}/cache (should be owned by current user)
-Perms check on local node_modules   not ok  Check the permissions of files in {CWD}/prefix/node_modules (should be owned by current user)
-Perms check on global node_modules  not ok  Check the permissions of files in {CWD}/global/node_modules
-Perms check on local bin folder     not ok  Check the permissions of files in {CWD}/prefix/node_modules/.bin
-Perms check on global bin folder    not ok  Check the permissions of files in {CWD}/global/bin
-Verify cache contents               ok      verified 0 tarballs
+Connecting to the registry
+Ok
+Checking npm version
+Ok
+current: v1.0.0, latest: v1.0.0
+Checking node version
+Ok
+current: v1.0.0, recommended: v1.0.0
+Checking configured npm registry
+Ok
+using default registry (https://registry.npmjs.org/)
+Checking for git executable in PATH
+Ok
+/path/to/git
+Checking for global bin folder in PATH
+Ok
+{CWD}/global/bin
+Checking permissions on cached files (this may take awhile)
+Not ok
+Check the permissions of files in {CWD}/cache (should be owned by current user)
+Checking permissions on local node_modules (this may take awhile)
+Not ok
+Check the permissions of files in {CWD}/prefix/node_modules (should be owned by current user)
+Checking permissions on global node_modules (this may take awhile)
+Not ok
+Check the permissions of files in {CWD}/global/node_modules
+Checking permissions on local bin folder
+Not ok
+Check the permissions of files in {CWD}/prefix/node_modules/.bin
+Checking permissions on global bin folder
+Not ok
+Check the permissions of files in {CWD}/global/bin
+Verifying cache contents (this may take awhile)
+Ok
+verified 0 tarballs
 `
 
 exports[`test/lib/commands/doctor.js TAP incorrect owner > incorrect owner 1`] = `
-Check                               Value   Recommendation/Notes
-npm ping                            ok       
-npm -v                              ok      current: v1.0.0, latest: v1.0.0
-node -v                             ok      current: v1.0.0, recommended: v1.0.0
-npm config get registry             ok      using default registry (https://registry.npmjs.org/)
-git executable in PATH              ok      /path/to/git
-global bin folder in PATH           ok      {CWD}/global/bin
-Perms check on cached files         not ok  Check the permissions of files in {CWD}/cache (should be owned by current user)
-Perms check on local node_modules   ok       
-Perms check on global node_modules  ok       
-Perms check on local bin folder     ok       
-Perms check on global bin folder    ok       
-Verify cache contents               ok      verified 0 tarballs
+Connecting to the registry
+Ok
+Checking npm version
+Ok
+current: v1.0.0, latest: v1.0.0
+Checking node version
+Ok
+current: v1.0.0, recommended: v1.0.0
+Checking configured npm registry
+Ok
+using default registry (https://registry.npmjs.org/)
+Checking for git executable in PATH
+Ok
+/path/to/git
+Checking for global bin folder in PATH
+Ok
+{CWD}/global/bin
+Checking permissions on cached files (this may take awhile)
+Not ok
+Check the permissions of files in {CWD}/cache (should be owned by current user)
+Checking permissions on local node_modules (this may take awhile)
+Ok
+Checking permissions on global node_modules (this may take awhile)
+Ok
+Checking permissions on local bin folder
+Ok
+Checking permissions on global bin folder
+Ok
+Verifying cache contents (this may take awhile)
+Ok
+verified 0 tarballs
 `
 
 exports[`test/lib/commands/doctor.js TAP incorrect owner > logs 1`] = `
@@ -484,19 +641,41 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP incorrect permissions > incorrect owner 1`] = `
-Check                               Value   Recommendation/Notes
-npm ping                            ok       
-npm -v                              ok      current: v1.0.0, latest: v1.0.0
-node -v                             ok      current: v1.0.0, recommended: v1.0.0
-npm config get registry             ok      using default registry (https://registry.npmjs.org/)
-git executable in PATH              ok      /path/to/git
-global bin folder in PATH           ok      {CWD}/global/bin
-Perms check on cached files         not ok  Check the permissions of files in {CWD}/cache (should be owned by current user)
-Perms check on local node_modules   not ok  Check the permissions of files in {CWD}/prefix/node_modules (should be owned by current user)
-Perms check on global node_modules  not ok  Check the permissions of files in {CWD}/global/node_modules
-Perms check on local bin folder     not ok  Check the permissions of files in {CWD}/prefix/node_modules/.bin
-Perms check on global bin folder    not ok  Check the permissions of files in {CWD}/global/bin
-Verify cache contents               ok      verified 0 tarballs
+Connecting to the registry
+Ok
+Checking npm version
+Ok
+current: v1.0.0, latest: v1.0.0
+Checking node version
+Ok
+current: v1.0.0, recommended: v1.0.0
+Checking configured npm registry
+Ok
+using default registry (https://registry.npmjs.org/)
+Checking for git executable in PATH
+Ok
+/path/to/git
+Checking for global bin folder in PATH
+Ok
+{CWD}/global/bin
+Checking permissions on cached files (this may take awhile)
+Not ok
+Check the permissions of files in {CWD}/cache (should be owned by current user)
+Checking permissions on local node_modules (this may take awhile)
+Not ok
+Check the permissions of files in {CWD}/prefix/node_modules (should be owned by current user)
+Checking permissions on global node_modules (this may take awhile)
+Not ok
+Check the permissions of files in {CWD}/global/node_modules
+Checking permissions on local bin folder
+Not ok
+Check the permissions of files in {CWD}/prefix/node_modules/.bin
+Checking permissions on global bin folder
+Not ok
+Check the permissions of files in {CWD}/global/bin
+Verifying cache contents (this may take awhile)
+Ok
+verified 0 tarballs
 `
 
 exports[`test/lib/commands/doctor.js TAP incorrect permissions > logs 1`] = `
@@ -553,8 +732,8 @@ Object {
     String(
       doctor getGitPath Error: test error
       doctor     at which ({CWD}/{TESTDIR}/doctor.js:313:15)
-      doctor     at Doctor.getGitPath ({CWD}/lib/commands/doctor.js:300:18)
-      doctor     at Doctor.exec ({CWD}/lib/commands/doctor.js:130:40)
+      doctor     at Doctor.getGitPath ({CWD}/lib/commands/doctor.js:286:18)
+      doctor     at Doctor.exec ({CWD}/lib/commands/doctor.js:125:33)
       doctor     at processTicksAndRejections (node:internal/process/task_queues:95:5)
       doctor     at MockNpm.exec ({CWD}/test/fixtures/mock-npm.js:80:26)
     ),
@@ -563,19 +742,36 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP missing git > missing git 1`] = `
-Check                               Value   Recommendation/Notes
-npm ping                            ok       
-npm -v                              ok      current: v1.0.0, latest: v1.0.0
-node -v                             ok      current: v1.0.0, recommended: v1.0.0
-npm config get registry             ok      using default registry (https://registry.npmjs.org/)
-git executable in PATH              not ok  Error: Install git and ensure it's in your PATH.
-global bin folder in PATH           ok      {CWD}/global/bin
-Perms check on cached files         ok       
-Perms check on local node_modules   ok       
-Perms check on global node_modules  ok       
-Perms check on local bin folder     ok       
-Perms check on global bin folder    ok       
-Verify cache contents               ok      verified 0 tarballs
+Connecting to the registry
+Ok
+Checking npm version
+Ok
+current: v1.0.0, latest: v1.0.0
+Checking node version
+Ok
+current: v1.0.0, recommended: v1.0.0
+Checking configured npm registry
+Ok
+using default registry (https://registry.npmjs.org/)
+Checking for git executable in PATH
+Not ok
+Error: Install git and ensure it's in your PATH.
+Checking for global bin folder in PATH
+Ok
+{CWD}/global/bin
+Checking permissions on cached files (this may take awhile)
+Ok
+Checking permissions on local node_modules (this may take awhile)
+Ok
+Checking permissions on global node_modules (this may take awhile)
+Ok
+Checking permissions on local bin folder
+Ok
+Checking permissions on global bin folder
+Ok
+Verifying cache contents (this may take awhile)
+Ok
+verified 0 tarballs
 `
 
 exports[`test/lib/commands/doctor.js TAP missing global directories > logs 1`] = `
@@ -606,19 +802,38 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP missing global directories > missing global directories 1`] = `
-Check                               Value   Recommendation/Notes
-npm ping                            ok       
-npm -v                              ok      current: v1.0.0, latest: v1.0.0
-node -v                             ok      current: v1.0.0, recommended: v1.0.0
-npm config get registry             ok      using default registry (https://registry.npmjs.org/)
-git executable in PATH              ok      /path/to/git
-global bin folder in PATH           ok      {CWD}/global/bin
-Perms check on cached files         ok       
-Perms check on local node_modules   ok       
-Perms check on global node_modules  not ok  Check the permissions of files in {CWD}/global/node_modules
-Perms check on local bin folder     ok       
-Perms check on global bin folder    not ok  Check the permissions of files in {CWD}/global/bin
-Verify cache contents               ok      verified 0 tarballs
+Connecting to the registry
+Ok
+Checking npm version
+Ok
+current: v1.0.0, latest: v1.0.0
+Checking node version
+Ok
+current: v1.0.0, recommended: v1.0.0
+Checking configured npm registry
+Ok
+using default registry (https://registry.npmjs.org/)
+Checking for git executable in PATH
+Ok
+/path/to/git
+Checking for global bin folder in PATH
+Ok
+{CWD}/global/bin
+Checking permissions on cached files (this may take awhile)
+Ok
+Checking permissions on local node_modules (this may take awhile)
+Ok
+Checking permissions on global node_modules (this may take awhile)
+Not ok
+Check the permissions of files in {CWD}/global/node_modules
+Checking permissions on local bin folder
+Ok
+Checking permissions on global bin folder
+Not ok
+Check the permissions of files in {CWD}/global/bin
+Verifying cache contents (this may take awhile)
+Ok
+verified 0 tarballs
 `
 
 exports[`test/lib/commands/doctor.js TAP missing local node_modules > logs 1`] = `
@@ -646,19 +861,36 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP missing local node_modules > missing local node_modules 1`] = `
-Check                               Value   Recommendation/Notes
-npm ping                            ok       
-npm -v                              ok      current: v1.0.0, latest: v1.0.0
-node -v                             ok      current: v1.0.0, recommended: v1.0.0
-npm config get registry             ok      using default registry (https://registry.npmjs.org/)
-git executable in PATH              ok      /path/to/git
-global bin folder in PATH           ok      {CWD}/global/bin
-Perms check on cached files         ok       
-Perms check on local node_modules   ok       
-Perms check on global node_modules  ok       
-Perms check on local bin folder     ok       
-Perms check on global bin folder    ok       
-Verify cache contents               ok      verified 0 tarballs
+Connecting to the registry
+Ok
+Checking npm version
+Ok
+current: v1.0.0, latest: v1.0.0
+Checking node version
+Ok
+current: v1.0.0, recommended: v1.0.0
+Checking configured npm registry
+Ok
+using default registry (https://registry.npmjs.org/)
+Checking for git executable in PATH
+Ok
+/path/to/git
+Checking for global bin folder in PATH
+Ok
+{CWD}/global/bin
+Checking permissions on cached files (this may take awhile)
+Ok
+Checking permissions on local node_modules (this may take awhile)
+Ok
+Checking permissions on global node_modules (this may take awhile)
+Ok
+Checking permissions on local bin folder
+Ok
+Checking permissions on global bin folder
+Ok
+Verifying cache contents (this may take awhile)
+Ok
+verified 0 tarballs
 `
 
 exports[`test/lib/commands/doctor.js TAP node out of date - current > logs 1`] = `
@@ -686,19 +918,36 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP node out of date - current > node is out of date 1`] = `
-Check                               Value   Recommendation/Notes
-npm ping                            ok       
-npm -v                              ok      current: v1.0.0, latest: v1.0.0
-node -v                             not ok  Use node v2.0.1 (current: v2.0.0)
-npm config get registry             ok      using default registry (https://registry.npmjs.org/)
-git executable in PATH              ok      /path/to/git
-global bin folder in PATH           ok      {CWD}/global/bin
-Perms check on cached files         ok       
-Perms check on local node_modules   ok       
-Perms check on global node_modules  ok       
-Perms check on local bin folder     ok       
-Perms check on global bin folder    ok       
-Verify cache contents               ok      verified 0 tarballs
+Connecting to the registry
+Ok
+Checking npm version
+Ok
+current: v1.0.0, latest: v1.0.0
+Checking node version
+Not ok
+Use node v2.0.1 (current: v2.0.0)
+Checking configured npm registry
+Ok
+using default registry (https://registry.npmjs.org/)
+Checking for git executable in PATH
+Ok
+/path/to/git
+Checking for global bin folder in PATH
+Ok
+{CWD}/global/bin
+Checking permissions on cached files (this may take awhile)
+Ok
+Checking permissions on local node_modules (this may take awhile)
+Ok
+Checking permissions on global node_modules (this may take awhile)
+Ok
+Checking permissions on local bin folder
+Ok
+Checking permissions on global bin folder
+Ok
+Verifying cache contents (this may take awhile)
+Ok
+verified 0 tarballs
 `
 
 exports[`test/lib/commands/doctor.js TAP node out of date - lts > logs 1`] = `
@@ -726,19 +975,36 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP node out of date - lts > node is out of date 1`] = `
-Check                               Value   Recommendation/Notes
-npm ping                            ok       
-npm -v                              ok      current: v1.0.0, latest: v1.0.0
-node -v                             not ok  Use node v1.0.0 (current: v0.0.1)
-npm config get registry             ok      using default registry (https://registry.npmjs.org/)
-git executable in PATH              ok      /path/to/git
-global bin folder in PATH           ok      {CWD}/global/bin
-Perms check on cached files         ok       
-Perms check on local node_modules   ok       
-Perms check on global node_modules  ok       
-Perms check on local bin folder     ok       
-Perms check on global bin folder    ok       
-Verify cache contents               ok      verified 0 tarballs
+Connecting to the registry
+Ok
+Checking npm version
+Ok
+current: v1.0.0, latest: v1.0.0
+Checking node version
+Not ok
+Use node v1.0.0 (current: v0.0.1)
+Checking configured npm registry
+Ok
+using default registry (https://registry.npmjs.org/)
+Checking for git executable in PATH
+Ok
+/path/to/git
+Checking for global bin folder in PATH
+Ok
+{CWD}/global/bin
+Checking permissions on cached files (this may take awhile)
+Ok
+Checking permissions on local node_modules (this may take awhile)
+Ok
+Checking permissions on global node_modules (this may take awhile)
+Ok
+Checking permissions on local bin folder
+Ok
+Checking permissions on global bin folder
+Ok
+Verifying cache contents (this may take awhile)
+Ok
+verified 0 tarballs
 `
 
 exports[`test/lib/commands/doctor.js TAP non-default registry > logs 1`] = `
@@ -766,19 +1032,36 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP non-default registry > non default registry 1`] = `
-Check                               Value   Recommendation/Notes
-npm ping                            ok       
-npm -v                              ok      current: v1.0.0, latest: v1.0.0
-node -v                             ok      current: v1.0.0, recommended: v1.0.0
-npm config get registry             not ok  Try \`npm config set registry=https://registry.npmjs.org/\`
-git executable in PATH              ok      /path/to/git
-global bin folder in PATH           ok      {CWD}/global/bin
-Perms check on cached files         ok       
-Perms check on local node_modules   ok       
-Perms check on global node_modules  ok       
-Perms check on local bin folder     ok       
-Perms check on global bin folder    ok       
-Verify cache contents               ok      verified 0 tarballs
+Connecting to the registry
+Ok
+Checking npm version
+Ok
+current: v1.0.0, latest: v1.0.0
+Checking node version
+Ok
+current: v1.0.0, recommended: v1.0.0
+Checking configured npm registry
+Not ok
+Try \`npm config set registry=https://registry.npmjs.org/\`
+Checking for git executable in PATH
+Ok
+/path/to/git
+Checking for global bin folder in PATH
+Ok
+{CWD}/global/bin
+Checking permissions on cached files (this may take awhile)
+Ok
+Checking permissions on local node_modules (this may take awhile)
+Ok
+Checking permissions on global node_modules (this may take awhile)
+Ok
+Checking permissions on local bin folder
+Ok
+Checking permissions on global bin folder
+Ok
+Verifying cache contents (this may take awhile)
+Ok
+verified 0 tarballs
 `
 
 exports[`test/lib/commands/doctor.js TAP npm out of date > logs 1`] = `
@@ -806,19 +1089,36 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP npm out of date > npm is out of date 1`] = `
-Check                               Value   Recommendation/Notes
-npm ping                            ok       
-npm -v                              not ok  Use npm v2.0.0
-node -v                             ok      current: v1.0.0, recommended: v1.0.0
-npm config get registry             ok      using default registry (https://registry.npmjs.org/)
-git executable in PATH              ok      /path/to/git
-global bin folder in PATH           ok      {CWD}/global/bin
-Perms check on cached files         ok       
-Perms check on local node_modules   ok       
-Perms check on global node_modules  ok       
-Perms check on local bin folder     ok       
-Perms check on global bin folder    ok       
-Verify cache contents               ok      verified 0 tarballs
+Connecting to the registry
+Ok
+Checking npm version
+Not ok
+Use npm v2.0.0
+Checking node version
+Ok
+current: v1.0.0, recommended: v1.0.0
+Checking configured npm registry
+Ok
+using default registry (https://registry.npmjs.org/)
+Checking for git executable in PATH
+Ok
+/path/to/git
+Checking for global bin folder in PATH
+Ok
+{CWD}/global/bin
+Checking permissions on cached files (this may take awhile)
+Ok
+Checking permissions on local node_modules (this may take awhile)
+Ok
+Checking permissions on global node_modules (this may take awhile)
+Ok
+Checking permissions on local bin folder
+Ok
+Checking permissions on global bin folder
+Ok
+Verifying cache contents (this may take awhile)
+Ok
+verified 0 tarballs
 `
 
 exports[`test/lib/commands/doctor.js TAP ping 404 > logs 1`] = `
@@ -846,19 +1146,37 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP ping 404 > ping 404 1`] = `
-Check                               Value   Recommendation/Notes
-npm ping                            not ok  404 404 Not Found - GET https://registry.npmjs.org/-/ping?write=true
-npm -v                              ok      current: v1.0.0, latest: v1.0.0
-node -v                             ok      current: v1.0.0, recommended: v1.0.0
-npm config get registry             ok      using default registry (https://registry.npmjs.org/)
-git executable in PATH              ok      /path/to/git
-global bin folder in PATH           ok      {CWD}/global/bin
-Perms check on cached files         ok       
-Perms check on local node_modules   ok       
-Perms check on global node_modules  ok       
-Perms check on local bin folder     ok       
-Perms check on global bin folder    ok       
-Verify cache contents               ok      verified 0 tarballs
+Connecting to the registry
+Not ok
+404 404 Not Found - GET https://registry.npmjs.org/-/ping?write=true
+Checking npm version
+Ok
+current: v1.0.0, latest: v1.0.0
+Checking node version
+Ok
+current: v1.0.0, recommended: v1.0.0
+Checking configured npm registry
+Ok
+using default registry (https://registry.npmjs.org/)
+Checking for git executable in PATH
+Ok
+/path/to/git
+Checking for global bin folder in PATH
+Ok
+{CWD}/global/bin
+Checking permissions on cached files (this may take awhile)
+Ok
+Checking permissions on local node_modules (this may take awhile)
+Ok
+Checking permissions on global node_modules (this may take awhile)
+Ok
+Checking permissions on local bin folder
+Ok
+Checking permissions on global bin folder
+Ok
+Verifying cache contents (this may take awhile)
+Ok
+verified 0 tarballs
 `
 
 exports[`test/lib/commands/doctor.js TAP ping 404 in color > logs 1`] = `
@@ -886,19 +1204,37 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP ping 404 in color > ping 404 in color 1`] = `
-Check                               Value   Recommendation/Notes
-npm ping                            not ok  404 404 Not Found - GET https://registry.npmjs.org/-/ping?write=true
-npm -v                              ok      current: v1.0.0, latest: v1.0.0
-node -v                             ok      current: v1.0.0, recommended: v1.0.0
-npm config get registry             ok      using default registry (https://registry.npmjs.org/)
-git executable in PATH              ok      /path/to/git
-global bin folder in PATH           ok      {CWD}/global/bin
-Perms check on cached files         ok       
-Perms check on local node_modules   ok       
-Perms check on global node_modules  ok       
-Perms check on local bin folder     ok       
-Perms check on global bin folder    ok       
-Verify cache contents               ok      verified 0 tarballs
+Connecting to the registry
+Not ok
+404 404 Not Found - GET https://registry.npmjs.org/-/ping?write=true
+Checking npm version
+Ok
+current: v1.0.0, latest: v1.0.0
+Checking node version
+Ok
+current: v1.0.0, recommended: v1.0.0
+Checking configured npm registry
+Ok
+using default registry (https://registry.npmjs.org/)
+Checking for git executable in PATH
+Ok
+/path/to/git
+Checking for global bin folder in PATH
+Ok
+{CWD}/global/bin
+Checking permissions on cached files (this may take awhile)
+Ok
+Checking permissions on local node_modules (this may take awhile)
+Ok
+Checking permissions on global node_modules (this may take awhile)
+Ok
+Checking permissions on local bin folder
+Ok
+Checking permissions on global bin folder
+Ok
+Verifying cache contents (this may take awhile)
+Ok
+verified 0 tarballs
 `
 
 exports[`test/lib/commands/doctor.js TAP ping exception with code > logs 1`] = `
@@ -926,19 +1262,37 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP ping exception with code > ping failure 1`] = `
-Check                               Value   Recommendation/Notes
-npm ping                            not ok  request to https://registry.npmjs.org/-/ping?write=true failed, reason: Test Error
-npm -v                              ok      current: v1.0.0, latest: v1.0.0
-node -v                             ok      current: v1.0.0, recommended: v1.0.0
-npm config get registry             ok      using default registry (https://registry.npmjs.org/)
-git executable in PATH              ok      /path/to/git
-global bin folder in PATH           ok      {CWD}/global/bin
-Perms check on cached files         ok       
-Perms check on local node_modules   ok       
-Perms check on global node_modules  ok       
-Perms check on local bin folder     ok       
-Perms check on global bin folder    ok       
-Verify cache contents               ok      verified 0 tarballs
+Connecting to the registry
+Not ok
+request to https://registry.npmjs.org/-/ping?write=true failed, reason: Test Error
+Checking npm version
+Ok
+current: v1.0.0, latest: v1.0.0
+Checking node version
+Ok
+current: v1.0.0, recommended: v1.0.0
+Checking configured npm registry
+Ok
+using default registry (https://registry.npmjs.org/)
+Checking for git executable in PATH
+Ok
+/path/to/git
+Checking for global bin folder in PATH
+Ok
+{CWD}/global/bin
+Checking permissions on cached files (this may take awhile)
+Ok
+Checking permissions on local node_modules (this may take awhile)
+Ok
+Checking permissions on global node_modules (this may take awhile)
+Ok
+Checking permissions on local bin folder
+Ok
+Checking permissions on global bin folder
+Ok
+Verifying cache contents (this may take awhile)
+Ok
+verified 0 tarballs
 `
 
 exports[`test/lib/commands/doctor.js TAP ping exception without code > logs 1`] = `
@@ -966,19 +1320,37 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP ping exception without code > ping failure 1`] = `
-Check                               Value   Recommendation/Notes
-npm ping                            not ok  request to https://registry.npmjs.org/-/ping?write=true failed, reason: Test Error
-npm -v                              ok      current: v1.0.0, latest: v1.0.0
-node -v                             ok      current: v1.0.0, recommended: v1.0.0
-npm config get registry             ok      using default registry (https://registry.npmjs.org/)
-git executable in PATH              ok      /path/to/git
-global bin folder in PATH           ok      {CWD}/global/bin
-Perms check on cached files         ok       
-Perms check on local node_modules   ok       
-Perms check on global node_modules  ok       
-Perms check on local bin folder     ok       
-Perms check on global bin folder    ok       
-Verify cache contents               ok      verified 0 tarballs
+Connecting to the registry
+Not ok
+request to https://registry.npmjs.org/-/ping?write=true failed, reason: Test Error
+Checking npm version
+Ok
+current: v1.0.0, latest: v1.0.0
+Checking node version
+Ok
+current: v1.0.0, recommended: v1.0.0
+Checking configured npm registry
+Ok
+using default registry (https://registry.npmjs.org/)
+Checking for git executable in PATH
+Ok
+/path/to/git
+Checking for global bin folder in PATH
+Ok
+{CWD}/global/bin
+Checking permissions on cached files (this may take awhile)
+Ok
+Checking permissions on local node_modules (this may take awhile)
+Ok
+Checking permissions on global node_modules (this may take awhile)
+Ok
+Checking permissions on local bin folder
+Ok
+Checking permissions on global bin folder
+Ok
+Verifying cache contents (this may take awhile)
+Ok
+verified 0 tarballs
 `
 
 exports[`test/lib/commands/doctor.js TAP silent errors > logs 1`] = `
@@ -1021,11 +1393,21 @@ Object {
 `
 
 exports[`test/lib/commands/doctor.js TAP windows skips permissions checks > no permissions checks 1`] = `
-Check                      Value   Recommendation/Notes
-npm ping                   ok       
-npm -v                     ok      current: v1.0.0, latest: v1.0.0
-node -v                    ok      current: v1.0.0, recommended: v1.0.0
-npm config get registry    ok      using default registry (https://registry.npmjs.org/)
-git executable in PATH     ok      /path/to/git
-global bin folder in PATH  ok      {CWD}/global
+Connecting to the registry
+Ok
+Checking npm version
+Ok
+current: v1.0.0, latest: v1.0.0
+Checking node version
+Ok
+current: v1.0.0, recommended: v1.0.0
+Checking configured npm registry
+Ok
+using default registry (https://registry.npmjs.org/)
+Checking for git executable in PATH
+Ok
+/path/to/git
+Checking for global bin folder in PATH
+Ok
+{CWD}/global
 `
diff --git a/tap-snapshots/test/lib/commands/profile.js.test.cjs b/tap-snapshots/test/lib/commands/profile.js.test.cjs
index 4530dbf95cec2..1fbb09de29f3c 100644
--- a/tap-snapshots/test/lib/commands/profile.js.test.cjs
+++ b/tap-snapshots/test/lib/commands/profile.js.test.cjs
@@ -31,19 +31,6 @@ exports[`test/lib/commands/profile.js TAP profile get multiple args default outp
 foo	foo@github.com (verified)	https://github.com/npm
 `
 
-exports[`test/lib/commands/profile.js TAP profile get no args --color > should output all profile info with color result 1`] = `
-name: foo
-email: foo@github.com (verified)
-two-factor auth: auth-and-writes
-fullname: Foo Bar
-homepage: https://github.com
-freenode: foobar
-twitter: https://twitter.com/npmjs
-github: https://github.com/npm
-created: 2015-02-26T01:26:37.384Z
-updated: 2020-08-12T16:19:35.326Z
-`
-
 exports[`test/lib/commands/profile.js TAP profile get no args --parseable > should output all profile info as parseable result 1`] = `
 tfa	auth-and-writes
 name	foo
diff --git a/tap-snapshots/test/lib/docs.js.test.cjs b/tap-snapshots/test/lib/docs.js.test.cjs
index ad20cfa5069e0..671e614851074 100644
--- a/tap-snapshots/test/lib/docs.js.test.cjs
+++ b/tap-snapshots/test/lib/docs.js.test.cjs
@@ -2958,7 +2958,7 @@ exports[`test/lib/docs.js TAP usage doctor > must match snapshot 1`] = `
 Check the health of your npm environment
 
 Usage:
-npm doctor [ping] [registry] [versions] [environment] [permissions] [cache]
+npm doctor [connection] [registry] [versions] [environment] [permissions] [cache]
 
 Options:
 [--registry <registry>]
@@ -2966,7 +2966,7 @@ Options:
 Run "npm help doctor" for more info
 
 \`\`\`bash
-npm doctor [ping] [registry] [versions] [environment] [permissions] [cache]
+npm doctor [connection] [registry] [versions] [environment] [permissions] [cache]
 \`\`\`
 
 Note: This command is unaware of workspaces.
diff --git a/tap-snapshots/test/lib/utils/reify-output.js.test.cjs b/tap-snapshots/test/lib/utils/reify-output.js.test.cjs
index 5983ac224e26e..d653d4c1fadc0 100644
--- a/tap-snapshots/test/lib/utils/reify-output.js.test.cjs
+++ b/tap-snapshots/test/lib/utils/reify-output.js.test.cjs
@@ -1634,19 +1634,17 @@ exports[`test/lib/utils/reify-output.js TAP packages changed message  > {"added"
 `
 
 exports[`test/lib/utils/reify-output.js TAP prints dedupe difference on dry-run > diff table 1`] = `
-
-change  bar  1.0.0 -> 2.1.0
-remove  bar  1.0.0         
-add     foo  1.0.0         
+change bar 1.0.0 => 2.1.0
+remove bar 1.0.0
+add foo 1.0.0
 
 removed 1 package, and changed 1 package in {TIME}
 `
 
 exports[`test/lib/utils/reify-output.js TAP prints dedupe difference on long > diff table 1`] = `
-
-change  bar  1.0.0 -> 2.1.0
-remove  bar  1.0.0         
-add     foo  1.0.0         
+change bar 1.0.0 => 2.1.0
+remove bar 1.0.0
+add foo 1.0.0
 
 removed 1 package, and changed 1 package in {TIME}
 `
diff --git a/test/lib/commands/hook.js b/test/lib/commands/hook.js
index a93b0c99f5267..003dae647a35a 100644
--- a/test/lib/commands/hook.js
+++ b/test/lib/commands/hook.js
@@ -1,6 +1,5 @@
 const t = require('tap')
 const mockNpm = require('../../fixtures/mock-npm')
-const { stripVTControlCharacters } = require('node:util')
 
 const mockHook = async (t, { hookResponse, ...npmOpts } = {}) => {
   const now = Date.now()
@@ -31,6 +30,7 @@ const mockHook = async (t, { hookResponse, ...npmOpts } = {}) => {
         type: pkgTypes[name],
         endpoint: 'https://google.com',
         last_delivery: id % 2 === 0 ? now : undefined,
+        response_code: 200,
       }))
     },
     rm: async (id, opts) => {
@@ -243,11 +243,18 @@ t.test('npm hook ls', async t => {
     },
     'received the correct arguments'
   )
-  t.equal(outputs[0], 'You have 3 hooks configured.', 'prints the correct header')
-  const out = stripVTControlCharacters(outputs[1])
-  t.match(out, /semver.*https:\/\/google.com.*\n.*\n.*never triggered/, 'prints package hook')
-  t.match(out, /@npmcli.*https:\/\/google.com.*\n.*\n.*triggered just now/, 'prints scope hook')
-  t.match(out, /~npm.*https:\/\/google.com.*\n.*\n.*never triggered/, 'prints owner hook')
+  t.strictSame(outputs, [
+    'You have 3 hooks configured.',
+    'Hook 1: semver',
+    'Endpoint: https://google.com',
+    'Never triggered\n',
+    'Hook 2: @npmcli',
+    'Endpoint: https://google.com',
+    'Triggered just now, response code was "200"\n',
+    'Hook 3: ~npm',
+    'Endpoint: https://google.com',
+    'Never triggered\n',
+  ])
 })
 
 t.test('npm hook ls, no results', async t => {
@@ -266,7 +273,7 @@ t.test('npm hook ls, no results', async t => {
     },
     'received the correct arguments'
   )
-  t.equal(outputs[0], "You don't have any hooks configured yet.", 'prints the correct result')
+  t.strictSame(outputs, [`You don't have any hooks configured yet.`])
 })
 
 t.test('npm hook ls, single result', async t => {
@@ -292,9 +299,12 @@ t.test('npm hook ls, single result', async t => {
     },
     'received the correct arguments'
   )
-  t.equal(outputs[0], 'You have one hook configured.', 'prints the correct header')
-  const out = stripVTControlCharacters(outputs[1])
-  t.match(out, /semver.*https:\/\/google.com.*\n.*\n.*never triggered/, 'prints package hook')
+  t.strictSame(outputs, [
+    'You have 1 hook configured.',
+    'Hook 1: semver',
+    'Endpoint: https://google.com',
+    'Never triggered\n',
+  ])
 })
 
 t.test('npm hook ls - json output', async t => {
@@ -363,10 +373,10 @@ t.test('npm hook ls - parseable output', async t => {
   t.strictSame(
     outputs.map(line => line.split(/\t/)),
     [
-      ['id', 'name', 'type', 'endpoint', 'last_delivery'],
-      ['1', 'semver', 'package', 'https://google.com', ''],
-      ['2', '@npmcli', 'scope', 'https://google.com', `${now}`],
-      ['3', 'npm', 'owner', 'https://google.com', ''],
+      ['id', 'name', 'type', 'endpoint', 'last_delivery', 'response_code'],
+      ['1', 'semver', 'package', 'https://google.com', '', '200'],
+      ['2', '@npmcli', 'scope', 'https://google.com', `${now}`, '200'],
+      ['3', 'npm', 'owner', 'https://google.com', '', '200'],
     ],
     'prints the correct result'
   )
diff --git a/test/lib/commands/login.js b/test/lib/commands/login.js
index b42d3001ebb90..a55637f9e00e2 100644
--- a/test/lib/commands/login.js
+++ b/test/lib/commands/login.js
@@ -1,12 +1,12 @@
 const t = require('tap')
-const fs = require('fs')
-const path = require('path')
+const fs = require('node:fs')
+const path = require('node:path')
+const stream = require('node:stream')
 const ini = require('ini')
 
 const { load: loadMockNpm } = require('../../fixtures/mock-npm.js')
 const mockGlobals = require('@npmcli/mock-globals')
 const MockRegistry = require('@npmcli/mock-registry')
-const stream = require('stream')
 
 const mockLogin = async (t, { stdin: stdinLines, registry: registryUrl, ...options } = {}) => {
   let stdin
diff --git a/test/lib/commands/org.js b/test/lib/commands/org.js
index 576a16d19303d..7a1538d9c69e4 100644
--- a/test/lib/commands/org.js
+++ b/test/lib/commands/org.js
@@ -1,6 +1,5 @@
 const t = require('tap')
 const mockNpm = require('../../fixtures/mock-npm')
-const { stripVTControlCharacters } = require('node:util')
 
 const mockOrg = async (t, { orgSize = 1, orgList = {}, ...npmOpts } = {}) => {
   let setArgs = null
@@ -427,10 +426,11 @@ t.test('npm org ls', async t => {
     },
     'receieved the correct args'
   )
-  const out = stripVTControlCharacters(outputs[0])
-  t.match(out, /one.*developer/, 'contains the developer member')
-  t.match(out, /two.*admin/, 'contains the admin member')
-  t.match(out, /three.*owner/, 'contains the owner member')
+  t.strictSame(outputs, [
+    'one - developer',
+    'three - owner',
+    'two - admin',
+  ])
 })
 
 t.test('npm org ls - user filter', async t => {
@@ -452,9 +452,9 @@ t.test('npm org ls - user filter', async t => {
     },
     'receieved the correct args'
   )
-  const out = stripVTControlCharacters(outputs[0])
-  t.match(out, /username.*admin/, 'contains the filtered member')
-  t.notMatch(out, /missing.*admin/, 'does not contain other members')
+  t.strictSame(outputs, [
+    'username - admin',
+  ])
 })
 
 t.test('npm org ls - user filter, missing user', async t => {
@@ -475,9 +475,7 @@ t.test('npm org ls - user filter, missing user', async t => {
     },
     'receieved the correct args'
   )
-  const out = stripVTControlCharacters(outputs[0][0])
-  t.notMatch(out, /username/, 'does not contain the requested member')
-  t.notMatch(out, /missing.*admin/, 'does not contain other members')
+  t.strictSame(outputs, [])
 })
 
 t.test('npm org ls - no org', async t => {
diff --git a/test/lib/commands/profile.js b/test/lib/commands/profile.js
index c6cf2a071dcfa..4cf0908aae816 100644
--- a/test/lib/commands/profile.js
+++ b/test/lib/commands/profile.js
@@ -9,13 +9,6 @@ const mockProfile = async (t, { npmProfile, readUserInfo, qrcode, config, ...opt
       async createToken () {},
     },
     'qrcode-terminal': qrcode || { generate: (url, cb) => cb() },
-    'cli-table3': class extends Array {
-      toString () {
-        return this.filter(Boolean)
-          .map(i => [...Object.entries(i)].map(v => v.join(': ')))
-          .join('\n')
-      }
-    },
     '{LIB}/utils/read-user-info.js': readUserInfo || {
       async password () {},
       async otp () {},
@@ -96,16 +89,6 @@ t.test('profile get no args', async t => {
     t.matchSnapshot(result(), 'should output all profile info as parseable result')
   })
 
-  t.test('--color', async t => {
-    const { profile, result } = await mockProfile(t, {
-      npmProfile: defaultNpmProfile,
-      config: { color: 'always' },
-    })
-
-    await profile.exec(['get'])
-    t.matchSnapshot(result(), 'should output all profile info with color result')
-  })
-
   t.test('no tfa enabled', async t => {
     const npmProfile = {
       async get () {
diff --git a/test/lib/commands/token.js b/test/lib/commands/token.js
index 33759d01d1b71..39fab55cca2d6 100644
--- a/test/lib/commands/token.js
+++ b/test/lib/commands/token.js
@@ -1,33 +1,38 @@
 const t = require('tap')
-const mockNpm = require('../../fixtures/mock-npm')
+const { load: loadMockNpm } = require('../../fixtures/mock-npm.js')
+const MockRegistry = require('@npmcli/mock-registry')
+const mockGlobals = require('@npmcli/mock-globals')
+const stream = require('node:stream')
 
-const mockToken = async (t, { profile, getCredentialsByURI, readUserInfo, ...opts } = {}) => {
-  const mocks = {}
+const authToken = 'abcd1234'
+const password = 'this is not really a password'
 
-  if (profile) {
-    mocks['npm-profile'] = profile
-  }
-
-  if (readUserInfo) {
-    mocks['{LIB}/utils/read-user-info.js'] = readUserInfo
-  }
-
-  const mock = await mockNpm(t, {
-    ...opts,
-    command: 'token',
-    mocks,
-  })
-
-  // XXX: replace with mock registry
-  if (getCredentialsByURI) {
-    mock.npm.config.getCredentialsByURI = getCredentialsByURI
-  }
-
-  return mock
+const auth = {
+  '//registry.npmjs.org/:_authToken': authToken,
 }
 
+const now = new Date().toISOString()
+const tokens = [
+  {
+    key: 'abcd1234abcd1234',
+    token: 'efgh5678efgh5678',
+    cidr_whitelist: null,
+    readonly: false,
+    created: now,
+    updated: now,
+  },
+  {
+    key: 'abcd1256',
+    token: 'hgfe8765',
+    cidr_whitelist: ['192.168.1.1/32'],
+    readonly: true,
+    created: now,
+    updated: now,
+  },
+]
+
 t.test('completion', async t => {
-  const { token } = await mockToken(t)
+  const { token } = await loadMockNpm(t, { command: 'token' })
 
   const testComp = (argv, expect) => {
     t.resolveMatch(token.completion({ conf: { argv: { remain: argv } } }), expect, argv.join(' '))
@@ -44,476 +49,332 @@ t.test('completion', async t => {
 })
 
 t.test('token foobar', async t => {
-  const { token } = await mockToken(t)
+  const { npm } = await loadMockNpm(t)
 
-  await t.rejects(token.exec(['foobar']), /foobar is not a recognized subcommand/)
+  await t.rejects(npm.exec('token', ['foobar']), /foobar is not a recognized subcommand/)
 })
 
 t.test('token list', async t => {
-  const now = new Date().toISOString()
-  const tokens = [
-    {
-      key: 'abcd1234abcd1234',
-      token: 'efgh5678efgh5678',
-      cidr_whitelist: null,
-      readonly: false,
-      created: now,
-      updated: now,
-    },
-    {
-      key: 'abcd1256',
-      token: 'hgfe8765',
-      cidr_whitelist: ['192.168.1.1/32'],
-      readonly: true,
-      created: now,
-      updated: now,
-    },
-  ]
-
-  const { token, joinedOutput } = await mockToken(t, {
-    config: { registry: 'https://registry.npmjs.org', otp: '123456' },
-    getCredentialsByURI: uri => {
-      t.equal(uri, 'https://registry.npmjs.org/', 'requests correct registry')
-      return { token: 'thisisnotarealtoken' }
-    },
-    profile: {
-      listTokens: async conf => {
-        t.same(conf.auth, { token: 'thisisnotarealtoken', otp: '123456' })
-        return tokens
-      },
-    },
+  const { npm, outputs } = await loadMockNpm(t, {
+    config: { ...auth },
   })
-
-  await token.exec([])
-
-  const lines = joinedOutput().split(/\r?\n/)
-  t.match(lines[3], ' abcd123 ', 'includes the trimmed key')
-  t.match(lines[3], ' efgh56… ', 'includes the trimmed token')
-  t.match(lines[3], ` ${now.slice(0, 10)} `, 'includes the trimmed creation timestamp')
-  t.match(lines[3], ' no ', 'includes the "no" string for readonly state')
-  t.match(lines[5], ' abcd125 ', 'includes the trimmed key')
-  t.match(lines[5], ' hgfe87… ', 'includes the trimmed token')
-  t.match(lines[5], ` ${now.slice(0, 10)} `, 'includes the trimmed creation timestamp')
-  t.match(lines[5], ' yes ', 'includes the "no" string for readonly state')
-  t.match(lines[5], ` ${tokens[1].cidr_whitelist.join(',')} `, 'includes the cidr whitelist')
+  const registry = new MockRegistry({
+    tap: t,
+    registry: npm.config.get('registry'),
+    authorization: authToken,
+  })
+  registry.getTokens(tokens)
+  await npm.exec('token', [])
+  t.strictSame(outputs, [
+    `Publish token efgh5678efgh5678… with id abcd123 created ${now.slice(0, 10)}`,
+    '',
+    `Read only token hgfe8765… with id abcd125 created ${now.slice(0, 10)}`,
+    'with IP whitelist: 192.168.1.1/32',
+    '',
+  ])
 })
 
 t.test('token list json output', async t => {
-  const now = new Date().toISOString()
-  const tokens = [
-    {
-      key: 'abcd1234abcd1234',
-      token: 'efgh5678efgh5678',
-      cidr_whitelist: null,
-      readonly: false,
-      created: now,
-      updated: now,
-    },
-  ]
-
-  const { token, joinedOutput } = await mockToken(t, {
-    config: { registry: 'https://registry.npmjs.org', json: true },
-    getCredentialsByURI: uri => {
-      t.equal(uri, 'https://registry.npmjs.org/', 'requests correct registry')
-      return { username: 'foo', password: 'bar' }
-    },
-    profile: {
-      listTokens: async conf => {
-        t.same(
-          conf.auth,
-          { basic: { username: 'foo', password: 'bar' } },
-          'passes the correct auth'
-        )
-        return tokens
-      },
+  const { npm, joinedOutput } = await loadMockNpm(t, {
+    config: {
+      ...auth,
+      json: true,
     },
-
   })
-
-  await token.exec(['list'])
-
+  const registry = new MockRegistry({
+    tap: t,
+    registry: npm.config.get('registry'),
+    authorization: authToken,
+  })
+  registry.getTokens(tokens)
+  await npm.exec('token', ['list'])
   const parsed = JSON.parse(joinedOutput())
   t.match(parsed, tokens, 'prints the json parsed tokens')
 })
 
 t.test('token list parseable output', async t => {
-  const now = new Date().toISOString()
-  const tokens = [
-    {
-      key: 'abcd1234abcd1234',
-      token: 'efgh5678efgh5678',
-      cidr_whitelist: null,
-      readonly: false,
-      created: now,
-      updated: now,
-    },
-    {
-      key: 'efgh5678ijkl9101',
-      token: 'hgfe8765',
-      cidr_whitelist: ['192.168.1.1/32'],
-      readonly: true,
-      created: now,
-      updated: now,
-    },
-  ]
-
-  const { token, joinedOutput } = await mockToken(t, {
-    config: { registry: 'https://registry.npmjs.org', parseable: true },
-    getCredentialsByURI: uri => {
-      t.equal(uri, 'https://registry.npmjs.org/', 'requests correct registry')
-      return { auth: Buffer.from('foo:bar').toString('base64') }
-    },
-    profile: {
-      listTokens: async conf => {
-        t.same(
-          conf.auth,
-          { basic: { username: 'foo', password: 'bar' } },
-          'passes the correct auth'
-        )
-        return tokens
-      },
+  const { npm, outputs } = await loadMockNpm(t, {
+    config: {
+      ...auth,
+      parseable: true,
     },
   })
-
-  await token.exec(['list'])
-
-  const lines = joinedOutput().split(/\r?\n/)
-
-  t.equal(
-    lines[0],
-    ['key', 'token', 'created', 'readonly', 'CIDR whitelist'].join('\t'),
-    'prints header'
-  )
-
-  t.equal(
-    lines[1],
-    [tokens[0].key, tokens[0].token, tokens[0].created, tokens[0].readonly, ''].join('\t'),
-    'prints token info'
-  )
-
-  t.equal(
-    lines[2],
-    [
-      tokens[1].key,
-      tokens[1].token,
-      tokens[1].created,
-      tokens[1].readonly,
-      tokens[1].cidr_whitelist.join(','),
-    ].join('\t'),
-    'prints token info'
-  )
+  const registry = new MockRegistry({
+    tap: t,
+    registry: npm.config.get('registry'),
+    authorization: authToken,
+  })
+  registry.getTokens(tokens)
+  await npm.exec('token', [])
+  t.strictSame(outputs, [
+    'key\ttoken\tcreated\treadonly\tCIDR whitelist',
+    `abcd1234abcd1234\tefgh5678efgh5678\t${now}\tfalse\t`,
+    `abcd1256\thgfe8765\t${now}\ttrue\t192.168.1.1/32`,
+  ])
 })
 
 t.test('token revoke', async t => {
-  const { token, joinedOutput } = await mockToken(t, {
-    config: { registry: 'https://registry.npmjs.org' },
-    getCredentialsByURI: uri => {
-      t.equal(uri, 'https://registry.npmjs.org/', 'requests correct registry')
-      return {}
-    },
-    profile: {
-      listTokens: async conf => {
-        t.same(conf.auth, {}, 'passes the correct empty auth')
-        return Promise.resolve([{ key: 'abcd1234' }])
-      },
-      removeToken: async key => {
-        t.equal(key, 'abcd1234', 'deletes the correct token')
-      },
-    },
+  const { npm, joinedOutput } = await loadMockNpm(t, {
+    config: { ...auth },
+  })
+  const registry = new MockRegistry({
+    tap: t,
+    registry: npm.config.get('registry'),
+    authorization: authToken,
   })
 
-  await token.exec(['rm', 'abcd'])
+  registry.getTokens(tokens)
+  registry.nock.delete(`/-/npm/v1/tokens/token/${tokens[0].key}`).reply(200)
+  await npm.exec('token', ['rm', tokens[0].key.slice(0, 8)])
 
   t.equal(joinedOutput(), 'Removed 1 token')
 })
 
 t.test('token revoke multiple tokens', async t => {
-  const { token, joinedOutput } = await mockToken(t, {
-    config: { registry: 'https://registry.npmjs.org' },
-    getCredentialsByURI: uri => {
-      t.equal(uri, 'https://registry.npmjs.org/', 'requests correct registry')
-      return { token: 'thisisnotarealtoken' }
-    },
-    profile: {
-      listTokens: async () => ([{ key: 'abcd1234' }, { key: 'efgh5678' }]),
-      removeToken: async key => {
-        // this will run twice
-        t.ok(['abcd1234', 'efgh5678'].includes(key), 'deletes the correct token')
-      },
-    },
+  const { npm, joinedOutput } = await loadMockNpm(t, {
+    config: { ...auth },
+  })
+  const registry = new MockRegistry({
+    tap: t,
+    registry: npm.config.get('registry'),
+    authorization: authToken,
   })
 
-  await token.exec(['revoke', 'abcd', 'efgh'])
+  registry.getTokens(tokens)
+  registry.nock.delete(`/-/npm/v1/tokens/token/${tokens[0].key}`).reply(200)
+  registry.nock.delete(`/-/npm/v1/tokens/token/${tokens[1].key}`).reply(200)
+  await npm.exec('token', ['rm', tokens[0].key.slice(0, 8), tokens[1].key.slice(0, 8)])
 
   t.equal(joinedOutput(), 'Removed 2 tokens')
 })
 
 t.test('token revoke json output', async t => {
-  const { token, joinedOutput } = await mockToken(t, {
-    config: { registry: 'https://registry.npmjs.org', json: true },
-    getCredentialsByURI: uri => {
-      t.equal(uri, 'https://registry.npmjs.org/', 'requests correct registry')
-      return { token: 'thisisnotarealtoken' }
-    },
-    profile: {
-      listTokens: async () => ([{ key: 'abcd1234' }]),
-      removeToken: async key => {
-        t.equal(key, 'abcd1234', 'deletes the correct token')
-      },
+  const { npm, joinedOutput } = await loadMockNpm(t, {
+    config: {
+      ...auth,
+      json: true,
     },
-
+  })
+  const registry = new MockRegistry({
+    tap: t,
+    registry: npm.config.get('registry'),
+    authorization: authToken,
   })
 
-  await token.exec(['delete', 'abcd'])
+  registry.getTokens(tokens)
+  registry.nock.delete(`/-/npm/v1/tokens/token/${tokens[0].key}`).reply(200)
+  await npm.exec('token', ['rm', tokens[0].key.slice(0, 8)])
 
   const parsed = JSON.parse(joinedOutput())
-  t.same(parsed, ['abcd1234'], 'logs the token as json')
+  t.same(parsed, [tokens[0].key], 'logs the token as json')
 })
 
 t.test('token revoke parseable output', async t => {
-  const { token, joinedOutput } = await mockToken(t, {
-    config: { registry: 'https://registry.npmjs.org', parseable: true },
-    getCredentialsByURI: uri => {
-      t.equal(uri, 'https://registry.npmjs.org/', 'requests correct registry')
-      return { token: 'thisisnotarealtoken' }
-    },
-    profile: {
-      listTokens: async () => ([{ key: 'abcd1234' }]),
-      removeToken: async key => {
-        t.equal(key, 'abcd1234', 'deletes the correct token')
-      },
+  const { npm, joinedOutput } = await loadMockNpm(t, {
+    config: {
+      ...auth,
+      parseable: true,
     },
   })
+  const registry = new MockRegistry({
+    tap: t,
+    registry: npm.config.get('registry'),
+    authorization: authToken,
+  })
 
-  await token.exec(['remove', 'abcd'])
-
-  t.equal(joinedOutput(), 'abcd1234', 'logs the token as a string')
+  registry.getTokens(tokens)
+  registry.nock.delete(`/-/npm/v1/tokens/token/${tokens[0].key}`).reply(200)
+  await npm.exec('token', ['rm', tokens[0].key.slice(0, 8)])
+  t.equal(joinedOutput(), tokens[0].key, 'logs the token as a string')
 })
 
 t.test('token revoke by token', async t => {
-  const { token, joinedOutput } = await mockToken(t, {
-    config: { registry: 'https://registry.npmjs.org' },
-    getCredentialsByURI: uri => {
-      t.equal(uri, 'https://registry.npmjs.org/', 'requests correct registry')
-      return { token: 'thisisnotarealtoken' }
-    },
-    profile: {
-      listTokens: async () => ([{ key: 'abcd1234', token: 'efgh5678' }]),
-      removeToken: async key => {
-        t.equal(key, 'efgh5678', 'passes through user input')
-      },
-    },
+  const { npm, joinedOutput } = await loadMockNpm(t, {
+    config: { ...auth },
   })
-
-  await token.exec(['rm', 'efgh5678'])
+  const registry = new MockRegistry({
+    tap: t,
+    registry: npm.config.get('registry'),
+    authorization: authToken,
+  })
+  registry.getTokens(tokens)
+  registry.nock.delete(`/-/npm/v1/tokens/token/${tokens[0].token}`).reply(200)
+  await npm.exec('token', ['rm', tokens[0].token])
   t.equal(joinedOutput(), 'Removed 1 token')
 })
 
 t.test('token revoke requires an id', async t => {
-  const { token } = await mockToken(t)
+  const { npm } = await loadMockNpm(t)
 
-  await t.rejects(token.exec(['rm']), /`<tokenKey>` argument is required/)
+  await t.rejects(npm.exec('token', ['rm']), {
+    code: 'EUSAGE',
+    message: '`<tokenKey>` argument is required',
+  })
 })
 
 t.test('token revoke ambiguous id errors', async t => {
-  const { token } = await mockToken(t, {
-    config: { registry: 'https://registry.npmjs.org' },
-    getCredentialsByURI: uri => {
-      t.equal(uri, 'https://registry.npmjs.org/', 'requests correct registry')
-      return { token: 'thisisnotarealtoken' }
-    },
-    profile: {
-      listTokens: async () => ([{ key: 'abcd1234' }, { key: 'abcd5678' }]),
-    },
+  const { npm } = await loadMockNpm(t, {
+    config: { ...auth },
+  })
+  const registry = new MockRegistry({
+    tap: t,
+    registry: npm.config.get('registry'),
+    authorization: authToken,
+  })
+  registry.getTokens(tokens)
+  await t.rejects(npm.exec('token', ['rm', 'abcd']), {
+    message: /Token ID "abcd" was ambiguous/,
   })
-
-  await t.rejects(token.exec(['rm', 'abcd']), /Token ID "abcd" was ambiguous/)
 })
 
-t.test('token revoke unknown id errors', async t => {
-  const { token } = await mockToken(t, {
-    config: { registry: 'https://registry.npmjs.org' },
-    getCredentialsByURI: uri => {
-      t.equal(uri, 'https://registry.npmjs.org/', 'requests correct registry')
-      return { token: 'thisisnotarealtoken' }
-    },
-    profile: {
-      listTokens: async () => ([{ key: 'abcd1234' }]),
-    },
+t.test('token revoke unknown token', async t => {
+  const { npm } = await loadMockNpm(t, {
+    config: { ...auth },
+  })
+  const registry = new MockRegistry({
+    tap: t,
+    registry: npm.config.get('registry'),
+    authorization: authToken,
   })
 
-  await t.rejects(token.exec(['rm', 'efgh']), /Unknown token id or value "efgh"./)
+  registry.getTokens(tokens)
+  await t.rejects(npm.exec('token', ['rm', '0xnotreal']),
+    'Unknown token id or value 0xnotreal'
+  )
 })
 
 t.test('token create', async t => {
-  const now = new Date().toISOString()
-  const password = 'thisisnotreallyapassword'
-
-  const { token, joinedOutput } = await mockToken(t, {
+  const cidr = ['10.0.0.0/8', '192.168.1.0/24']
+  const { npm, outputs } = await loadMockNpm(t, {
     config: {
-      registry: 'https://registry.npmjs.org',
-      cidr: ['10.0.0.0/8', '192.168.1.0/24'],
-    },
-    getCredentialsByURI: uri => {
-      t.equal(uri, 'https://registry.npmjs.org/', 'requests correct registry')
-      return { token: 'thisisnotarealtoken' }
-    },
-    readUserInfo: {
-      password: () => Promise.resolve(password),
+      ...auth,
+      cidr,
     },
-    profile: {
-      createToken: async (pw, readonly, cidr) => {
-        t.equal(pw, password)
-        t.equal(readonly, false)
-        t.same(cidr, ['10.0.0.0/8', '192.168.1.0/24'], 'defaults to empty array')
-        return {
-          key: 'abcd1234',
-          token: 'efgh5678',
-          created: now,
-          updated: now,
-          readonly: false,
-          cidr_whitelist: [],
-        }
-      },
-    },
-
   })
+  const registry = new MockRegistry({
+    tap: t,
+    registry: npm.config.get('registry'),
+    authorization: authToken,
+  })
+  const stdin = new stream.PassThrough()
+  stdin.write(`${password}\n`)
+  mockGlobals(t, {
+    'process.stdin': stdin,
+    'process.stdout': new stream.PassThrough(), // to quiet readline
+  }, { replace: true })
+  registry.createToken({ password, cidr })
+  await npm.exec('token', ['create'])
+  t.strictSame(outputs, [
+    'Created publish token n3wt0k3n…',
+    'with IP whitelist: 10.0.0.0/8,192.168.1.0/24',
+  ])
+})
 
-  await token.exec(['create'])
-
-  const lines = joinedOutput().split(/\r?\n/)
-  t.match(lines[1], 'token')
-  t.match(lines[1], 'efgh5678', 'prints the whole token')
-  t.match(lines[3], 'created')
-  t.match(lines[3], now, 'prints the correct timestamp')
-  t.match(lines[5], 'readonly')
-  t.match(lines[5], 'false', 'prints the readonly flag')
-  t.match(lines[7], 'cidr_whitelist')
+t.test('token create read only', async t => {
+  const { npm, outputs } = await loadMockNpm(t, {
+    config: {
+      ...auth,
+      'read-only': true,
+    },
+  })
+  const registry = new MockRegistry({
+    tap: t,
+    registry: npm.config.get('registry'),
+    authorization: authToken,
+  })
+  const stdin = new stream.PassThrough()
+  stdin.write(`${password}\n`)
+  mockGlobals(t, {
+    'process.stdin': stdin,
+    'process.stdout': new stream.PassThrough(), // to quiet readline
+  }, { replace: true })
+  registry.createToken({ readonly: true, password })
+  await npm.exec('token', ['create'])
+  t.strictSame(outputs, [
+    'Created read only token n3wt0k3n…',
+  ])
 })
 
 t.test('token create json output', async t => {
-  const now = new Date().toISOString()
-  const password = 'thisisnotreallyapassword'
-
-  const { token } = await mockToken(t, {
-    config: { registry: 'https://registry.npmjs.org', json: true },
-    getCredentialsByURI: uri => {
-      t.equal(uri, 'https://registry.npmjs.org/', 'requests correct registry')
-      return { token: 'thisisnotarealtoken' }
-    },
-    readUserInfo: {
-      password: () => Promise.resolve(password),
-    },
-    profile: {
-      createToken: async (pw, readonly, cidr) => {
-        t.equal(pw, password)
-        t.equal(readonly, false)
-        t.same(cidr, [], 'defaults to empty array')
-        return {
-          key: 'abcd1234',
-          token: 'efgh5678',
-          created: now,
-          updated: now,
-          readonly: false,
-          cidr_whitelist: [],
-        }
-      },
-    },
-    output: spec => {
-      t.type(spec, 'string', 'outputs a string')
-      const parsed = JSON.parse(spec)
-      t.same(
-        parsed,
-        { token: 'efgh5678', created: now, readonly: false, cidr_whitelist: [] },
-        'outputs the correct object'
-      )
+  const cidr = ['10.0.0.0/8', '192.168.1.0/24']
+  const { npm, joinedOutput } = await loadMockNpm(t, {
+    config: {
+      ...auth,
+      json: true,
+      cidr,
     },
   })
-
-  await token.exec(['create'])
+  const registry = new MockRegistry({
+    tap: t,
+    registry: npm.config.get('registry'),
+    authorization: authToken,
+  })
+  const stdin = new stream.PassThrough()
+  stdin.write(`${password}\n`)
+  mockGlobals(t, {
+    'process.stdin': stdin,
+    'process.stdout': new stream.PassThrough(), // to quiet readline
+  }, { replace: true })
+  registry.createToken({ password, cidr })
+  await npm.exec('token', ['create'])
+  const parsed = JSON.parse(joinedOutput())
+  t.match(
+    parsed,
+    { token: 'n3wt0k3n', readonly: false, cidr_whitelist: cidr }
+  )
+  t.ok(parsed.created, 'also returns created')
 })
 
 t.test('token create parseable output', async t => {
-  const now = new Date().toISOString()
-  const password = 'thisisnotreallyapassword'
-
-  const { token, joinedOutput } = await mockToken(t, {
-    config: { registry: 'https://registry.npmjs.org', parseable: true },
-    getCredentialsByURI: uri => {
-      t.equal(uri, 'https://registry.npmjs.org/', 'requests correct registry')
-      return { token: 'thisisnotarealtoken' }
-    },
-    readUserInfo: {
-      password: () => Promise.resolve(password),
-    },
-    profile: {
-      createToken: async (pw, readonly, cidr) => {
-        t.equal(pw, password)
-        t.equal(readonly, false)
-        t.same(cidr, [], 'defaults to empty array')
-        return {
-          key: 'abcd1234',
-          token: 'efgh5678',
-          created: now,
-          updated: now,
-          readonly: false,
-          cidr_whitelist: [],
-        }
-      },
+  const cidr = ['10.0.0.0/8', '192.168.1.0/24']
+  const { npm, outputs } = await loadMockNpm(t, {
+    config: {
+      ...auth,
+      parseable: true,
+      cidr,
     },
   })
-
-  await token.exec(['create'])
-
-  const spec = joinedOutput().split(/\r?\n/)
-
-  t.match(spec[0], 'token\tefgh5678', 'prints the token')
-  t.match(spec[1], `created\t${now}`, 'prints the created timestamp')
-  t.match(spec[2], 'readonly\tfalse', 'prints the readonly flag')
-  t.match(spec[3], 'cidr_whitelist\t', 'prints the cidr whitelist')
+  const registry = new MockRegistry({
+    tap: t,
+    registry: npm.config.get('registry'),
+    authorization: authToken,
+  })
+  const stdin = new stream.PassThrough()
+  stdin.write(`${password}\n`)
+  mockGlobals(t, {
+    'process.stdin': stdin,
+    'process.stdout': new stream.PassThrough(), // to quiet readline
+  }, { replace: true })
+  registry.createToken({ password, cidr })
+  await npm.exec('token', ['create'])
+  t.equal(outputs[0], 'token\tn3wt0k3n')
+  t.ok(outputs[1].startsWith('created\t'))
+  t.equal(outputs[2], 'readonly\tfalse')
+  t.equal(outputs[3], 'cidr_whitelist\t10.0.0.0/8,192.168.1.0/24')
 })
 
 t.test('token create ipv6 cidr', async t => {
-  const password = 'thisisnotreallyapassword'
-
-  const { token } = await mockToken(t, {
-    config: { registry: 'https://registry.npmjs.org', cidr: '::1/128' },
-    getCredentialsByURI: uri => {
-      t.equal(uri, 'https://registry.npmjs.org/', 'requests correct registry')
-      return { token: 'thisisnotarealtoken' }
-    },
-    readUserInfo: {
-      password: () => Promise.resolve(password),
+  const { npm } = await loadMockNpm(t, {
+    config: {
+      ...auth,
+      cidr: '::1/128',
     },
   })
-
-  await t.rejects(
-    token.exec(['create']),
-    {
-      code: 'EINVALIDCIDR',
-      message: /CIDR whitelist can only contain IPv4 addresses, ::1\/128 is IPv6/,
-    },
-    'returns correct error'
-  )
+  await t.rejects(npm.exec('token', ['create'], {
+    code: 'EINVALIDCIDR',
+    message: /CIDR whitelist can only contain IPv4 addresses, ::1\/128 is IPv6/,
+  }))
 })
 
 t.test('token create invalid cidr', async t => {
-  const password = 'thisisnotreallyapassword'
-
-  const { token } = await mockToken(t, {
-    config: { registry: 'https://registry.npmjs.org', cidr: 'apple/cider' },
-    getCredentialsByURI: uri => {
-      t.equal(uri, 'https://registry.npmjs.org/', 'requests correct registry')
-      return { token: 'thisisnotarealtoken' }
-    },
-    readUserInfo: {
-      password: () => Promise.resolve(password),
+  const { npm } = await loadMockNpm(t, {
+    config: {
+      ...auth,
+      cidr: 'apple/cider',
     },
   })
-
-  await t.rejects(
-    token.exec(['create']),
-    { code: 'EINVALIDCIDR', message: /CIDR whitelist contains invalid CIDR entry: apple\/cider/ },
-    'returns correct error'
-  )
+  await t.rejects(npm.exec('token', ['create'], {
+    code: 'EINVALIDCIDR',
+    message: 'CIDR whitelist contains invalid CIDR entry: apple/cider',
+  }))
 })