Unable to build with Yarn 3 when @codesandbox/common is included in a project

🐛 bug report

Preflight Checklist

• [ x] I have read the Contributing Guidelines for this project.
• [x ] I agree to follow the Code of Conduct that this project
  adheres to.
• [ x] I have searched the issue tracker for an issue that matches the one I want
  to file, without success.

Description of the problem

Unable to build with Yarn 3 included. Yarn 3 does not like (rightfully) the inclusion of a git repo dependency and will fail with the following error:

YN0018: │ humps@https://github.com/CompuIves/humps.git#commit=7ee34e874c808cf60e7119ee71ac71b8bf2189b7: The remote archive doesn't match the expected checksum

To Reproduce

make a project that uses Yarn 3 and has @codesandbox/common as a dependency
There is a workaround: Use YARN_CHECKSUM_BEHAVIOR=update yarn install, but this turns off Yarn's checksum validation mechanism which introduces a large security hole.

How to fix

Publish CompuIves/humps as an npm package

Reproduce the failure with Yarn 3 in a project that depends on @codesandbox/common, and inspect how it references CompuIves/humps. Verify the fix by replacing the git dependency with a published npm package and confirming Yarn's checksum validation succeeds without YARN_CHECKSUM_BEHAVIOR=update.