Hacker News new | ask | show | jobs
by fuzzyman 5373 days ago
It doesn't make it more of an issue. Installing any Python package already requires "arbitrary code execution" -- which is the big problem with Python packaging. (And hopefully will be fixed by distutils2 which uses a setup.cfg to install packages rather than relying on executing setup.py.)
1 comments

How is the setup.py any different than say, Perl's Makefile.PL files?