FirstHack 2026 — a 36-hour online hackathon built for first-year students.•₹1,00,000 prize pool•22 Oct – 4 Nov•Open to every branch and every stream•Certificate for every team that submits•3 rounds•FirstHack 2026 — a 36-hour online hackathon built for first-year students.•₹1,00,000 prize pool•22 Oct – 4 Nov•Open to every branch and every stream•Certificate for every team that submits•3 rounds•
Your code is 5% yours. How to know what the other 95% is doing.
12 min read·Lesson 5 of 6·Pro
The size of the problem
Run pip install flask in a clean virtual environment. Flask arrives with Werkzeug, Jinja2, Click, itsdangerous, MarkupSafe and blinker. Add a database driver and a few utilities and a small project easily depends on forty packages written by dozens of people you have never met.
Every one of those packages runs with the same permissions as your code. A supply-chain attack does not break into your program. It gets invited.
This code prints what you actually have installed.
Python 3
from importlib.metadata import distributions
The rest of this lesson is Pro
The free lessons of Secure Coding Practices finish what
they start — read those first if you have not. This one goes further, and it
is part of the paid half.
A pass opens the paid lessons of every course, the mock test papers
and the company-wise series. It ends on its own date; nothing renews by itself.