fix: pin tar to patched version for dependabot (#51)

Author: mattinannt

package.json

@@ -25,7 +25,8 @@
       "on-headers": ">=1.1.0",
       "glob": ">=11.1.0",
       "node-forge": ">=1.3.2",
-      "js-yaml": ">=4.1.1"
+      "js-yaml": ">=4.1.1",
+      "tar": "7.5.7"
     }
   }
 }