I've seen the `itsdangerous` [1] package (which is a dependency for lot of Python projects) raise some eyebrows several times.

[1] https://itsdangerous.palletsprojects.com/en/stable/