Code in packages should be signed. Code in pickles should also be signed. I have no need for the pickle module now, but years ago thought there might have bee

Code in packages should be signed. Code in pickles should also be signed. I have no need for the pickle module now, but years ago thought there might have been safer way to read data that was already in pickles. For backwards compatibility, skipcode=False must be the default, were someone to implement a pickle str parser that doesn't eval code. JS/ES/TS Map doesn't map to JSON.