← Back to context Comment by haskellandchill 2 hours ago I think it is common that in installing packages you have hooks to execute code anyway. 2 comments haskellandchill Reply grey-area 2 hours ago This should not be common. haskellandchill 2 hours ago The current situation is that you have to go out of your way with things like `pip install --only-binary`. There is a lot of implicit trust in developer tooling.
grey-area 2 hours ago This should not be common. haskellandchill 2 hours ago The current situation is that you have to go out of your way with things like `pip install --only-binary`. There is a lot of implicit trust in developer tooling.
haskellandchill 2 hours ago The current situation is that you have to go out of your way with things like `pip install --only-binary`. There is a lot of implicit trust in developer tooling.
This should not be common.
The current situation is that you have to go out of your way with things like `pip install --only-binary`. There is a lot of implicit trust in developer tooling.