This does not seem safe when `sizeof(off_t) != sizeof(ssize_t)`. How about a `NPY_OFF_T_PYFMT` ?