• Fix: peer-controlled HostName, Software Version, and NOTIFICATION strings are escaped before they are written to JSON API streams.
• Fix: package metadata and PyPI page content. Project metadata now has one source of truth in pyproject.toml, declares the BSD license, restores keywords, fixes project URLs, and removes the stale exabgpcli entry point.
• Fix: README install, zipapp, version command, GitHub release archive, PyPI, and changelog links now point at working commands and URLs.
• QA: avoid functional test deadlocks when child stdout or stderr fills a pipe before process exit.