Critical vulnerability in the expand-pkg module that Update uses

[elena-int]

expand-pkg uses [email protected], which has a critical vulnerability:
GHSA-pjxw-22xf-6pwc

for which there seems to be no current fix. According to the Security vulnerability database recommendation above, it is recommended to replace the module with a different one that can provide the same functionality.