Reminder that pip runs arbitrary code

[stevendaprano]

This is just a reminder that not only pip install but also pip dryrun will run arbitrary code and can install files in your home directory. Or any other place you have write permission.

Further discussion here.