[Security] vulnerable dependency reported in npm audit

[GangWang01]

Hi, for latest libcipm 3.0.3 a vulnerable version of dependency npm-lifecycle was reported in npm audit. Could you please npm audit fix your package and publish to npm?

npm audit output follows:
High Arbitrary File Overwrite

Package tar

Patched in >=4.4.2

Dependency of npm

Path npm > libcipm > npm-lifecycle > node-gyp > tar

More info https://nodesecurity.io/advisories/803