On: Malicious Rust crate Arrayref runs a build-time payload

[Filligree]

I use urllib.request. It works fine, it’s always available, and I don’t need to push it through an audit.