My experience too. I was shocked how terrible Python ecosystem is. For example stuff like dependency confusion i.e. public package with potentially malicious c

My experience too. I was shocked how terrible Python ecosystem is. For example stuff like dependency confusion i.e. public package with potentially malicious code overwriting private package are impossible in Composer by design. https://twitter.com/seldaek/status/1359417655762055171 https://twitter.com/seldaek/status/1359417655762055171 But pip, npm and RubyGems failed to protect against dependency confusion. So Apple, Microsoft and dozens of other companies pulled malicious code. https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610 https://medium.com/@alex.birsan/dependency-confusion-4a5d60f... We are very lucky to have awesome Jordi Boggiano in the PHP ecosystem. He is doing gods work on Composer and Packgist.