diff --git a/package.json b/package.json
index c95e83e..11fb2b4 100644
--- a/package.json
+++ b/package.json
@@ -56,7 +56,7 @@
     "minipass-pipeline": "^1.2.4",
     "p-map": "^4.0.0",
     "ssri": "^12.0.0",
-    "tar": "^6.1.11",
+    "tar": "^7.4.3",
     "unique-filename": "^4.0.0"
   },
   "devDependencies": {