PIPASK

Summary from the TLDR newsletter

pipask is a drop-in replacement for pip that performs security checks before installing a package. It relies on metadata from PyPI whenever possible. pipask asks for consent first if third-party code execution is necessary. It uses pip to handle the actual installation if the installation is approved.