This is a tricky package to support, since the tar file is improperly structured and it is not an autotools package. Refactor slightly and add IS_TAR_BOMB option for this kind of use case.