Update download dependency and make path stripping optional in `.extract()`

Fixes #664.