Bump/pin devDeps

See https://github.com/mafintosh/tar-fs/issues/113

package.json

@@ -172,7 +172,7 @@
     "@types/node": "*",
     "cc": "^3.0.1",
     "emnapi": "^1.3.1",
-    "exif-reader": "^2.0.1",
+    "exif-reader": "^2.0.2",
     "extract-zip": "^2.0.1",
     "icc": "^3.0.0",
     "jsdoc-to-markdown": "^9.1.1",
@@ -182,7 +182,7 @@
     "nyc": "^17.1.0",
     "prebuild": "^13.0.1",
     "semistandard": "^17.0.0",
-    "tar-fs": "^3.0.6",
+    "tar-fs": "3.0.6",
     "tsd": "^0.31.2"
   },
   "license": "Apache-2.0",