pipask: Secure Python Package Installation
2025-05-03
pipask is a safer alternative to pip, adding security checks before installing Python packages. It prioritizes using PyPI metadata, avoiding downloading and executing code whenever possible. If third-party code execution is necessary, pipask asks for user consent. After performing checks, including repository popularity, package age, known vulnerabilities, PyPI download counts, and metadata verification, it presents a formatted report and requests approval. Upon approval, it hands off installation to standard pip.
Development