now only npmd-unpack uses tar
3.2.4