Tar package security update

[dmattia]

This PR adds a Yarn resolutions entry to package.json to enforce the tar package at version ^7.5.7 or higher.

Why:
This change addresses the Dependabot security alert regarding a vulnerability in the tar package. Although tar is not currently a direct or transitive dependency in this repository, this resolution ensures that any future or latent transitive dependency on tar will be resolved to a secure version.

Related Issues

• https://github.com/transcend-io/main/security/dependabot/1153

Security Implications

Addresses a security vulnerability (CVE-2024-28182) in the tar package by enforcing a minimum version of 7.5.7.

System Availability

[none]

---

 

[cursor]

Cursor Agent can help with this pull request. Just @cursor in comments and I'll start working on changes in this branch.
_{Learn more about Cursor Agents}