Hacker News new | ask | show | jobs
by westurner 695 days ago
setup.py could or should execute in a RestrictedPython sandbox if run as root (even in a container).

Starlark and Skylark are also restricted subsets of Python, for build configuration with Blaze, Bazel, Buck2, Caddy,

"Starlark implementations, tools, and users" https://github.com/bazelbuild/starlark/blob/master/users.md