Post

Security tip for conda package authors: prefer environment-variable JSON files over activation scripts. Activation scripts run arbitrary shell code on every activation. Plain env-var JSON does the same job in most cases, with none of the code-execution risk.