[Snyk] Fix for 2 vulnerabilities

[sestinj]

Snyk has created this PR to fix 2 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• core/package.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Infinite loop SNYK-JS-TAR-17909068	828
	Allocation of Resources Without Limits or Throttling SNYK-JS-TAR-17909152	828

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

[sestinj]

This update involves a major version upgrade for sqlite3 and a patch update for tar.

sqlite3 5.1.7 → 6.0.1

Risk: HIGH

This is a major version upgrade, but the most critical change is that the sqlite3 package is now officially unmaintained. While the v6.0.0 release itself does not introduce direct API breaking changes, it primarily consists of dependency updates.

Key Changes:

• Unmaintained Status: The repository has been marked as unmaintained, meaning there will be no further updates, security patches, or support.
• Dependencies: All dependencies have been bumped to their latest versions.

Recommendation:
Given that sqlite3 is no longer maintained, it is highly recommended to plan a migration to a different, actively maintained SQLite library. Some alternatives mentioned by the community include better-sqlite3. Continuing to use an unmaintained package for database operations poses a significant long-term security and operational risk.

Source: GitHub Release Notes, npm Package Page

tar 7.5.16 → 7.5.19

Risk: LOW

This is a patch version upgrade. According to semantic versioning, it should not contain any breaking changes, only bug fixes or minor enhancements. No breaking changes were noted in the package documentation for this range.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.