>But if they go to pypi, it won't have many installs If people are using number of installs as a safety metric, can't blackhats game that by having a bot insta

>But if they go to pypi, it won't have many installs If people are using number of installs as a safety metric, can't blackhats game that by having a bot install the package many times?