British developer uses homegrown scanning tool to check for risks - The Python Package Index, or PyPI, continues to surprise and not in a good way.