tar-minefield: Tar file extraction test suite

About

A test suite and documentation of ambiguous tar archives that different tar implementations extract differently. This matters for security because a scanner and an extractor using different implementations could inspect different files than the ones written to disk. The project proposes a strict default policy that it reports accepting 99.79% of 82,586 published source tarballs.