Hello! 👋

Thanks for opening this pull request! Please check out our contributing guidelines. We appreciate you taking the initiative to contribute to this project.

Contributing isn't limited to just code. We encourage you to contribute in the way that best fits your abilities, by writing tutorials, giving a demo at your local meetup, helping other users with their support questions, or revising our documentation.

Here are some useful Composer commands to get you started:

• composer install: Install dependencies.
• composer test: Run the full test suite.
• composer phpcs: Check for code style violations.
• composer phpcbf: Automatically fix code style violations.
• composer phpunit: Run unit tests.
• composer behat: Run behavior-driven tests.

To run a single Behat test, you can use the following command:

# Run all tests in a single file
composer behat features/some-feature.feature

# Run only a specific scenario (where 123 is the line number of the "Scenario:" title)
composer behat features/some-feature.feature:123

You can find a list of all available Behat steps in our handbook.

Summary of Changes

Hello, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request refines the Extractor class by implementing more robust and secure path handling mechanisms. The changes focus on ensuring that file operations, particularly extraction and directory removal, correctly resolve file paths and prevent unintended actions outside designated directories, thereby enhancing the overall stability and security of the extraction process.

Highlights

• Enhanced Tarball Path Resolution: The extract_tarball method now uses realpath() to resolve tarball paths to their absolute form, improving reliability and security by explicitly validating the file's existence and readability.
• Improved Directory Removal Safety: The rmdir method was updated to prevent directory traversal vulnerabilities by strictly ensuring that only files and directories within the specified base directory are removed, issuing a warning and skipping removal for any files found outside this scope.
• Removed Unused Helper Function: The path_is_relative private static method was removed as its functionality is no longer required after the path handling improvements.

Codecov Report

❌ Patch coverage is 86.66667% with 2 lines in your changes missing coverage. Please review.

📢 Thoughts on this report? Let us know!