Hello, #339 in v4.8.0 broke stevedore which broke bandit for at least myself (but probably others)

https://github.com/common-workflow-language/cwltool/pull/1482/checks?check_run_id=3454232416#step:9:50
PyCQA/bandit#730

Reverting to importlib_metadata version 4.7.1 resolves the problem for me

Originally posted by @mr-c in #339 (comment)