I was just coming to this repo to make this exact same PR. Thanks for doing it @AstroGD !

Same here, but it seems that this package is no longer maintained?!

I need this fix as well. Thanks for the work to update it. Hope it gets merged soon.

@zeke , @kevinsawicki , is there any hope to get this PR merged for this inactive package?
It is currently an indirect dependency of electron-packager (electron-packager > asar > mksnapshot > decompress-zip), all projects using electron-packager now have a "high severity vulnerability" being detected by npm audit.
(Note that @bizob2828 also logged an issue against asar to remove the dependency leading to this)

Not sure if anyone cares, but I bit the bullet and forked the relevant repos. I didn't publish to npm as I hope this will eventually get resolved but you can just npm install Contrast-Security-OSS/asar#v0.14.8

@bizob2828 Thanks for the effort. Ill try using your version of asar as long as there is no official fix. Did you create a PR for your fixed version at the asar Repo?

It seems this PR is no longer needed as there was an update on this repo, that updated the dependencies.
(Im referring to this commit: 90d0956 )