[BUG] `extract-zip` fails npm audit

[aslushnikov]

We currently rely on extract-zip package to extract zip archives. The package, however, has not been maintained and currently raises unfortunate errors.

See max-mapper/extract-zip#85

extract-zip is a thin wrapper atop of yauzl - we should probably use that directly.

[aslushnikov]

Hey @ABuffSeagull!

I saw your PR to Puppeteer regarding extract-zip: puppeteer/puppeteer#5526
We're actually interested in this PR at Playwright as well. Would you like to contribute?

[ABuffSeagull]

Absolutely! Just need to figure out one last problem on in puppeteer first, and then I'll look over this.

[aslushnikov]

For the record: we require all the fancy corner cases logic in extract-zip to handle symlinks properly. So we don't save much using raw yauzl instead of extract-zip.