package.json: lock down tar to v2.2.1
package.json: lock down tar to v2.2.1

- resolves an issue where tarball-extract refers to an incorrect version of tar #238

hainproject/hain,appetizermonster/hain,hainproject/hain,hainproject/hain,appetizermonster/hain,appetizermonster/hain,hainproject/hain,appetizermonster/hain