https://nvd.nist.gov/vuln/detail/CVE-2024-6221

Also switch the url to the homepage

Tarballs suck again! The tarball on PyPI does no match any commit in
the git repo. The closest commit is [1], and fixes for Python 3.12 are
merged after that [2].

Here are differences between the PyPI tarball and the closest commit.
Seems no backdoor in tarball-only files :)

    Only in git/flask-cors: .git
    Only in git/flask-cors: .github
    Only in git/flask-cors: .gitignore
    Only in git/flask-cors: CHANGELOG.md
    Only in tarball/Flask-Cors-4.0.0: Flask_Cors.egg-info
    Only in tarball/Flask-Cors-4.0.0: PKG-INFO
    diff -ur tarball/Flask-Cors-4.0.0/setup.cfg git/flask-cors/setup.cfg
    --- tarball/Flask-Cors-4.0.0/setup.cfg	2023-06-26 13:38:34.166286000 +0800
    +++ git/flask-cors/setup.cfg	2024-04-06 20:28:41.747140353 +0800
    @@ -1,7 +1,2 @@
     [bdist_wheel]
     universal = true
    -
    -[egg_info]
    -tag_build =
    -tag_date = 0
    -

[1] https://github.com/corydolphin/flask-cors/tree/0b744011ac7252f2cd96f76b75a772c48e19f0d6
[2] https://github.com/corydolphin/flask-cors/pull/332

The only breaking change is dropping older Python [1]. Also,
python-aiobotocore and python-moto tests pass. I pushed this to
[extra-testing] just in case, as many AUR packages depend on it.

* python-six is not needed after [1]
* python-werkzeug is an implicit dependency

[1] https://github.com/corydolphin/flask-cors/pull/330

* Fix LICENSE file permission [1]
* Get rid of `python setup.py test` [2]
* Drop python-nose
* Adds myself as a maintainer after a private talk with demize on IRC

[1] https://bugs.archlinux.org/task/76629
[2] https://archlinux.org/todo/stop-using-python-setuppy-test/