Do not add a package until you know the tree, extras, OSV findings, licenses, dependents, and health. PyDeps shows that on one page. Keep pip-audit for CI after you lock.
Search packages on PyDeps
PyDeps is an interactive Python dependency graph explorer. Please enable JavaScript for the full experience, or browse popular packages: pandas, numpy, django, flask, requests.