setup.py could or should execute in a RestrictedPython sandbox if run as root (even in a container). Starlark and Skylark are also restricted subsets of Python

setup.py could or should execute in a RestrictedPython sandbox if run as root (even in a container). Starlark and Skylark are also restricted subsets of Python, for build configuration with Blaze, Bazel, Buck2, Caddy, "Starlark implementations, tools, and users" https://github.com/bazelbuild/starlark/blob/master/users.md https://github.com/bazelbuild/starlark/blob/master/users.md