diff --git a/package.json b/package.json
index 8e34339..0ab64ed 100644
--- a/package.json
+++ b/package.json
@@ -63,7 +63,7 @@
     "safe-buffer": "^5.1.2",
     "semver": "^5.5.0",
     "ssri": "^6.0.0",
-    "tar": "^4.4.1",
+    "tar": "4.4.1",
     "unique-filename": "^1.1.0",
     "which": "^1.3.0"
   },