Skip to content

Remove dependency 'yacl'#6

Open
lorcap wants to merge 1 commit intosciapp:developfrom
lorcap:no-yacl
Open

Remove dependency 'yacl'#6
lorcap wants to merge 1 commit intosciapp:developfrom
lorcap:no-yacl

Conversation

@lorcap
Copy link

@lorcap lorcap commented Jan 19, 2026

Because this script handles sensitive data such as access tokens, a user must trust it.

A user:

  • trusts Python's stdandard library
  • may trust this script after inspection
  • cannot analyze/trust 3rd-party libraries and all their dependencies.

As such, no external code should be imported in this script, IMHO.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant