Andras Lasso

I agree that it is an extra step to look these up. For this reason, I don't even attempt to review a PR on my phone etc. Asking the submitter...

PyPI is free for all, without any security or other audit whatsoever. Therefore, even if we review a package and even if we lock the extension git hash, somebody can...

> If there is less review of extension submissions that then results in malicious code Less review is extremely unlikely to result in more malicious code. More malicious code will...

We need to decide if we want to simplify the review process. If we choose to simplify by deciding based on the submitted metadata then it makes sense to make...

Thank you, very nice! It is great to see that the extension has been updated! A few comments: - [ ] On my Windows computer, all downloads fail with error...

Yes, we'll do it in the same commit and then git will recognize it as a file move, as the file content is almost the same.

Adding/renaming/removing extensions have significant long-term impact. If an extension appears in the extension catalog for a few months and it shows up in some youtube videos or forum posts then...

Probably you could pip install PyQt, but I would not recommend it, because PyQt's free license is a restrictive viral license (GPLv3). We don't explicitly prohibit using GPL code or...

First of all, there should be no reason to open some arbitary npy files. You can store markup lists in nice, human-readable, self-descriptive json or csv file. I would recommend...

- [ ] I could not figure out what exactly the extension does because there was no sample data set provided. You can create a release (from any git version)...