Publish v1 fix for GHSA-h9rv-jmmf-4pgx

I cannot easily upgrade to v2 in my project since it is an indirect dependency.

1.9.2 please? :)

Older major versions (1.x through 6.x) aren't maintained, so we won't be publishing a v1 backport. This advisory is fixed in 2.1.1 and later. Please upgrade to the latest 7.x, or use npm overrides / Yarn resolutions to force a newer version if it's a transitive dependency. Closing.