@GNUxeava Best of python is how pip and PyPI is a complete disaster in terms of security.
- Random binaries? Weee! Those can even be put into lockfiles, good luck vetting those.
- setup.py means pip will execute code, even for just downloads