[Dependencies] box-interesect installation error

Hello,

My company is running into an issue with the latest versions of plotly.js (> 2.5). We are installing the package through jupyterlab-plotly and are running into dependency issues.

Indeed, plotly.js is installing the box-intersect package directly from github (amongst many other packages), which is not accessible through our company CI network.

This behavior is very problematic as we cannot find a workaround yet. We have tried installing locally the dependencies, yet npm still tries to reach for github and fails the installation. Event installing plotly.js 2.4.X fails, because npm will detect a higher version.

Possible solutions :

• Restrict versions of plotly.js in jupyterlab-plotly more strictly. At the moment, jupyterlab-plotly references plotly.js too loosely, and always allows for version 2.5 to be installed. ^2.4.2 -> ~2.4.2
• Publish the many dependencies to npm rather than fetching them direclty from github.

[archmoj]

@nicolaskruchten could we change this line to dist? https://github.com/plotly/plotly.py/blob/ce0ed07d872c487698bde9d52e1f1aadf17aa65f/packages/javascript/jupyterlab-plotly/package.json#L68

[nicolaskruchten]

Should be fixed with 2.6 😃