Trail of Bits audit of PyPi

Leaving this here for reading later.