feat: override vulnerable 'tar' transitive dependency (#38)

Author: rdghe

package.json

@@ -42,12 +42,13 @@
     "lodash.isempty": "^4.4.0",
     "lodash.sortby": "^4.7.0",
     "micromatch": "4.0.8",
-    "snyk-nodejs-lockfile-parser": "2.5.0",
+    "snyk-nodejs-lockfile-parser": "2.6.0",
     "snyk-resolve-deps": "4.8.0"
   },
   "overrides": {
     "@yarnpkg/core": {
-      "cross-spawn": "^7.0.5"
+      "cross-spawn": "^7.0.5",
+      "tar@6.2.1": "7.5.9"
     }
   },
   "devDependencies": {