Z-Wave JS stops clearing an external configuration folder unless it is empty or contains the project’s version marker. That protects unrelated files when an installation points its external configuration setting at the wrong non-empty folder.
Configuration downloads also gain a decompression limit and checks that keep extracted files inside the intended directory.