Extract a ZIP archive

No. Encrypted entries are listed and marked, but they cannot be read without the password and this tool does not ask for one. Unlock the archive in a desktop tool first.

Because of what its own index says about it. An archive with hundreds of entries, one that expands to far more than it claims, or one entry that swells to hundreds of times its stored size, is refused before a single byte is decompressed — that pattern is how a small file is used to exhaust a browser tab.

They are saved under a flattened name, because a download cannot create folders. Names carrying "../" or a drive letter are cleaned first, and two files that would end up with the same name are numbered rather than overwriting each other.

Not here — this reads ZIP only, including the deflate and stored methods that make up virtually every ZIP in circulation. Entries using bzip2, LZMA or zstandard are listed and marked as unreadable rather than silently skipped.