fix: install more packages without panics

[KSXGitHub]

This is a temporary fix to make benchmarking with pnpm possible. /cc @zkochan

Related to #108 and #100.

[github-actions]

Benchmark Results

Linux

group                          main                                   pr
-----                          ----                                   --
tarball/download_dependency    1.01      8.1±0.24ms   537.1 KB/sec    1.00      8.0±0.13ms   541.3 KB/sec

[codecov]

Codecov Report

Patch coverage: 100.00% and no project coverage change.

Comparison is base (46fd143) 84.61% compared to head (118338c) 84.61%.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #111   +/-   ##
=======================================
  Coverage   84.61%   84.61%           
=======================================
  Files          24       24           
  Lines        1365     1365           
=======================================
  Hits         1155     1155           
  Misses        210      210           

Files Changed	Coverage Δ
crates/registry/src/package_distribution.rs	25.00% <ø> (ø)
crates/tarball/src/lib.rs	79.54% <ø> (ø)
crates/cli/src/package.rs	100.00% <100.00%> (ø)

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[KSXGitHub]

spawn_blocking proves to be faster than spawn on a small package.json:

But I was forced to change it back to spawn because it was extremely slow on a bigger package.json.