<story><title>Use `Python -m Pip`</title><url>https://snarky.ca/why-you-should-use-python-m-pip/</url></story><parent_chain></parent_chain><comment><author>jwilk</author><text>Beware that &amp;quot;python -m&amp;quot; is insecure in untrusted cwd:&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;bugs.python.org&amp;#x2F;issue33053&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;bugs.python.org&amp;#x2F;issue33053&lt;/a&gt;&lt;p&gt;E.g.:&lt;p&gt;&lt;pre&gt;&lt;code&gt;  $ echo &amp;#x27;import os; os.execvp(&amp;quot;cowsay&amp;quot;, [&amp;quot;-&amp;quot;, &amp;quot;pwned&amp;quot;])&amp;#x27; &amp;gt; pip.py
  $ python -m pip --version
   _______
  &amp;lt; pwned &amp;gt;
   -------
          \   ^__^
           \  (oo)\_______
              (__)\       )\&amp;#x2F;\
                  ||----w |
                  ||     ||&lt;/code&gt;&lt;/pre&gt;</text></comment>
<story><title>Use `Python -m Pip`</title><url>https://snarky.ca/why-you-should-use-python-m-pip/</url></story><parent_chain></parent_chain><comment><author>gammalost</author><text>Python is a fun language but the ecosystem around it is horrible.
It&amp;#x27;s a shame. I just want to pip install like I would a package manager</text></comment>