Do not allow tgzs to be corrupted

Fix npm/npmjs.org#151
v2.0.0