Merge pull request #12090 from backstage/fix/broken-zip-files

Throw on corrupt ZIP files instead of hanging indefinitely

packages/backend-common/package.json

@@ -41,6 +41,7 @@
     "@backstage/integration": "^1.2.2",
     "@backstage/types": "^1.0.0",
     "@google-cloud/storage": "^6.0.0",
+    "@keyv/redis": "^2.2.3",
     "@manypkg/get-packages": "^1.1.3",
     "@octokit/rest": "^19.0.3",
     "@types/cors": "^2.8.6",
@@ -64,7 +65,6 @@
     "jose": "^4.6.0",
     "keyv": "^4.0.3",
     "keyv-memcache": "^1.2.5",
-    "@keyv/redis": "^2.2.3",
     "knex": "^2.0.0",
     "lodash": "^4.17.21",
     "logform": "^2.3.2",
@@ -78,8 +78,8 @@
     "selfsigned": "^2.0.0",
     "stoppable": "^1.1.0",
     "tar": "^6.1.2",
-    "unzipper": "^0.10.11",
     "winston": "^3.2.1",
+    "yauzl": "^2.10.0",
     "yn": "^4.0.0"
   },
   "peerDependencies": {
@@ -106,7 +106,7 @@
     "@types/stoppable": "^1.1.0",
     "@types/supertest": "^2.0.8",
     "@types/tar": "^6.1.1",
-    "@types/unzipper": "^0.10.3",
+    "@types/yauzl": "^2.10.0",
     "@types/webpack-env": "^1.15.2",
     "aws-sdk-mock": "^5.2.1",
     "better-sqlite3": "^7.5.0",