v0.2.1

Security

• Archive symlinks: tarball extraction no longer creates symlink or hardlink entries, and zip/wheel extractors skip symlink entries. A package could ship a file as a symlink to a sensitive path (e.g. /proc/self/environ) and make lockscan, or a later step using artifacts-dir, read it (#20, #21).
• New findings archive:symlink-escape (high) and archive:symlink (moderate) report such links with their target.