I like the sound of that!

However it looks like has a lot of potential for a ‘xz’ exploit injection, so I’ll probably skip it.

From the project’s README.md : The current maintainer continues to apply pull requests and makes regular releases, but unfortunately has no capacity to do any development beyond addressing high-impact issues. When reporting bugs, please understand that unless you are including a pull request or are reporting a critical issue, you will probably not get a response.