Deprecated transitive dependency with security alerts [unzipper]

[Araxeus]

Is there an existing issue for this?

• I have searched the existing issues

Describe the bug

Unzipper uses the deprecated module fstream (https://www.npmjs.com/package/fstream)
which has several CVE's and bugs,(ZJONSSON/node-unzipper#261)

We should probably use https://www.npmjs.com/package/adm-zip or https://www.npmjs.com/package/archiver

there is also a bug in fstream where it doesnt use mkdirp in the right way (atleast when using bun):

can be fixed by changing

- mkdir(path.dirname(self._path), Writer.dirmode, function (er, made) {
+ mkdir.mkdirp(path.dirname(self._path), Writer.dirmode, function (er, made) {

in https://github.com/npm/fstream/blob/bffea43c6a201c76bc85842539e09a779508790b/lib/writer.js#L169

---

I fix it by using this fork: https://github.com/Araxeus/whatsapp-web.js/tree/webpack-exodus-fix-zip

  "dependencies": {,
    "whatsapp-web.js": "github:araxeus/whatsapp-web.js#webpack-exodus-fix-zip"
  },