> PyPI has its oopses too, Cargo is theoretically just as bad but in practice has been safe. One obvious further mitigation for Python is to configure your pac

> PyPI has its oopses too, Cargo is theoretically just as bad but in practice has been safe. One obvious further mitigation for Python is to configure your package installer to require pre-built wheels, and inspect the resulting environment prior to use. Of course, wheels can contain all sorts of compiled binary blobs and even the Python code can be obfuscated (or even missing, with just a compiled .pyc file in its place); but at least this way you are protected from arbitrary code running at install time.