PDM backend builds wheel and sdist with different permissions

[SamyAB]

Hi,

I noticed that pdm-backend builds wheels with mode 0o600, and sdists with mode 0o644. I would have expected them to have the same permissions.

From what I can gather from the source code, the wheels have the same mode as tempfile.NamedTemporaryFile, which is used to create the ZIP File, that is then copied using shutil.move() to the target.

Is this the intended behavior ?

Note: It seems other builders use 0o644 for wheels.