[python-uk] Reviewing third-party packages

[Michael Grazebrook]

It's a question which interests me too. If you find some good resources, could you post them to this group?


Do you know how much checking is done on the Active State and Anaconda distributions?
On 27 July 2017 at 00:17:33 +01:00, PyUK at getaroundtoit.co.uk wrote:

> Are you able to recommend materials which deal with the *management precautions* one should take in reviewing a third-party package before use/inclusion in a wider system, please?
> 
> 
> There are plenty of resources available which deal with the coding-technical side of things, eg dir(), help(), PSL's inspect.py, etc.
> 
> This enquiry encompasses those, but am particularly interested in security: back-doors, phoning-home, and other 'nasties'; license management; any costs; citation; etc.
> 
> 
> Will welcome references to articles, tutorials, check-lists, etc...
> 
> -- 
> Regards,
> =dn
> _______________________________________________
> python-uk mailing list
> <python-uk at python.org>
> <https://mail.python.org/mailman/listinfo/python-uk>
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/python-uk/attachments/20170727/5e83ea34/attachment.html>