[python-uk] Reviewing third-party packages

[PyUK at getaroundtoit.co.uk]

Are you able to recommend materials which deal with the *management 
precautions* one should take in reviewing a third-party package before 
use/inclusion in a wider system, please?


There are plenty of resources available which deal with the 
coding-technical side of things, eg dir(), help(), PSL's inspect.py, etc.

This enquiry encompasses those, but am particularly interested in 
security: back-doors, phoning-home, and other 'nasties'; license 
management; any costs; citation; etc.


Will welcome references to articles, tutorials, check-lists, etc...

-- 
Regards,
=dn