Python Packages Index, security: security review needed