Our unzip package is significantly different to Arch's: our patchset it missing dozens of patches, many of which are security-related.

Arch unzip PKGBUILD: https://github.com/archlinux/svntogit-packages/blob/packages/unzip/trunk/PKGBUILD