- Data oriented with classes being simplest data conainers with helper functions
## security
- Minimal use of PyPi dependencies to reduce security overhead
- [Ultralytics AI Library Hacked via GitHub for Cryptomining](https://www.wiz.io/blog/ultralytics-ai-library-hacked-via-github-for-cryptomining)
- Use system tools installed via systempackage manager
- Safer but nothing is perfect
- [Backdoor in XZ Utils allows RCE: everything you need to know](https://www.wiz.io/blog/cve-2024-3094-critical-rce-vulnerability-found-in-xz-utils)
-`Docker`
-`netns` network namespace isolation
- When installing packges go to github page and look for an explicit `pip install ...` to avoid typosquatting due to typos.
- Don't trust PyPi
- "`Starjacking` is linking a PyPi package to an unrelated repository on GitHub that has plenty of stars, suggesting popularity. [...] there is no validation of these links on PyPi [...]." ([source](https://devclass.com/2023/10/13/pypi-repo-attack-typesquatting-starjacking-and-hidden-code-aims-to-pinch-credentials-and-secrets/))