- console-script targets like 'pkg.mod:main [extra]' no longer leak the
'[extra]' suffix into the generated launcher; module-less entry points are
skipped instead of producing invalid Python
- stripComment now strips from the first '#' (not only ' #') and trims trailing
whitespace, matching its docstring
- adds tests demonstrating both behaviors
Co-authored-by: Jason Hall <imjasonh@users.noreply.github.com>
- wheelhouse now filters candidates by target platform/ABI/python tag and
prefers the most specific compatible wheel (fixes wrong-arch selection); also
streams sha256 and uses an index map instead of an O(n*m) scan
- wheel: add tag parser + compatibility, cap per-member size (zip-bomb guard),
reject members that escape the install prefix, stable sort
- lock: error on non-pinned/URL/editable lines instead of silently dropping
Co-authored-by: Jason Hall <imjasonh@users.noreply.github.com>