Please test for corrupted and/or dangerous tarballs

Your code base has only one sample tarball, at spec/data/test.tar.  Have you considered what might happen with tarballs that are not well-formed, violating the tar specification in easy-to-test ways?