In the latest release of python there was a fix for a "zipbomb" issue:

python/cpython#109858
python/cpython#110016

Since this package was "forked" from zipfile it should be checked if this is an issue also here.