The validator code contains (modified) fragments of the local_plugins_archive_validator class copyrighted by Marina Glancy that is part of the local_plugins plugin. It operates over an extracted copy of the ZIP file.
David Mudrák