I have recently encountering some issues where I package and distribute tarballs as a non-root user, then someone tries to extract it as root and it fails because the ownership data is preserved and it is trying to assign file ownership to a nonexistent user. tar.Pack's portable option looks like it would solve that because it omits uid and gid metadata, so I suggest that that option be made available in this library's pack function.