upgrade tar to version 4.2.2 or later

[vastbinderj]

@insight666 @AlexDomsn

There is an issue with the version of tar we using. Please review this alert message and update it.

[AlexDomsn]

Hi!
I was looking for information, I found out that the problem with tar is related to the installed dependencies of the node-gyp & node-sass packages, there is a solution how to remove an error about the version of tar from npm audit, but the solution is to install your dependencies for node_gyp in package-lock, but with npm install, package-lock will overwrite and the dependencies we manually install will restart

more precisely: node-sass has a dependency on node-gyp 3.8.0, which has a dependency on tar 2.2.1, as soon as sass updates the dependency node-gyp 3.8.1 or node-gyp 4.0.0, the problem is resolved. It does not depend on us

[vastbinderj]

@AlexDomsn what is your comfort level that we do not have a security vulnerability?

Can we upgrade node-sass to secure our code?

[AlexDomsn]

@vastbinderj we have the latest version of node-sass & gulp-sass, this situation with tar doesn't depend on us (