Unsafe installation practices

Open hasufell opened this issue 1 year ago • 2 comments

This package is unsafe to install.

https://github.com/WoeUSB/WoeUSB-ng/blob/18e8918f75af26c0258a5b5f7bdb13acb76611eb/setup.py#L15-L30

Paths are hardcoded and the README suggests to use sudo for installation. Pip user installation is broken.

IMO, such packages should be rejected from Pip.

Aug 27 '24 07:08 hasufell

Hello, thanks for your bug report. Feel free to submit patches that can improve this situation if you're able to.

Aug 27 '24 07:08 brlin-tw