When I run flit build I get a wheel and a source tarball. The tarbar has permissions 0644 ('-rw-rw-r--'), which matches my umask. However, the wheel has permissions 0600 (-rw-------), which is (IMHO) to strict, as other users are not able to read the wheel.

Hatch had a similar isse and I guess flit has the same reasons behind this issue.

If the current permissions are by intention, please explain why and maybe document this somewhere (or point me to existing docs, which I couldn't find).