> Installing anything that can be executed is potentially dangerous, but I imagine PIP install only installs from a trusted source. Nope, unfortunately not, an

> Installing anything that can be executed is potentially dangerous, but I imagine PIP install only installs from a trusted source. Nope, unfortunately not, anyone can publish anything to pypi as long as the name isn’t taken. Plenty of room for abuse with typo-squatting, etc.