title: python: PyPi public modules: How to determine if secure and safe?
body: <p>I am have completed my python 3 application, and it is using multiple public modules from PyPi.</p>
  
  <p>However, before I deploy it to run within my company's enterprise which will be handling credentials of our customers and accessing 3rd party APIs, I need to do due diligence that they are both secure and safe.</p>
  
  <p>What steps must I perform:</p>
  
  <ol>
  <li>Validate security of PyPi modules and safe to use, and it is important to note that the target Python 3 app will be handling credentials?</li>
  <li>What is the most recommended way validate PyPi modules' signature?</li>
  <li>Can PyPi module signature be trusted?</li>
  </ol>
  
  <p>By the way, the Python 3 application will be running within a Docker container.</p>
  
  <p>Thank you</p>