I think this got shared on hackernews too early for this to be ready, the author says somewhere else that packaging and publishing to app store is in the pipeline if I recall right.
I think there is always a danger, for every language, when you install a 3rd party dependency from a package repoitory. But usually this is restricted to the runtime of the application that uses the 3rd party library (and maybe, depending on the language, the code-paths that are executed).
That's a difficult enough problem to deal with already, but with Python, it's possible to execute code at install time of such a 3rd party library (basically, when you do a 'pip install stuff'). So, you might never have run the application you installed, but you'd still have executed whatever malware was hiding. This is not the case for a lot of other languages. Also, Python allows the execution of code when you have an `import stuff` statement, which is also not the case in other languages, often. But this is not directly related to this, just another 'Python-specific' attack vector.
Not sure what you are saying, have you read the article further? It also says that what you call 'established media' uses the same strategy. Either way, i think Scott renders a good argument overall, as usual, and I don't really see how your point invalidates any of it.
I had a similar experience where I asked it to tell me about creating a GUI with nim, and it told me to use the 'forms' module from the standard library, and the example code it printed was showing an easy to use and nice API. Took me a while to realise it wasn't my fault that I couldn't find any documentation about it, anywhere....
That's a fair enough stance. I'd recommend not taking any outside contributions until you are sure about the license, since it'll make it much harder to change the license if you do. Or maybe require all outside contributions to be licensed very permissively, like using the BSD license. Or you could use a CLA, but that's not something I'd recommend. Either way, licensing is hard :(. I can emphasise with the head hurting.... Oh, also, check out https://tldrlegal.com/ .
