v0.6.2
Who should take this release: anyone who checks .iirds files they did not build themselves. Every release up to 0.6.1 can be made to spend far more time and memory on a container than its size suggests, by a container that says so in its own records. A package that passed on 0.6.1 with a bzip2- or lzma-compressed entry fails on 0.6.2 (S14); that is the repair.
See CHANGELOG.md, section 0.6.2, for the full notes. Verify what you download: shasum -a 256 -c SHA256SUMS. The .pyz needs only a Python — python iirds.pyz your-package.iirds. On PyPI this release is iirds; iirds-validate and iirds-sdk are compatibility names that install it.