streaming unpack, and unpack directly to dir
depend on npmd-cache and tar-fs
injectable npm-cache
5.0.0
add config option, hardcode hash alg
5.0.1