Comment 2 for bug 1745467

Note also that the plugin system depends on being able to arbitrarily pull pip packages, bypassing any QA or security SLA that might be offered by your distribution. When I tried to package this in Debian I was modifying the plugin system to use apt/dpkg instead for plugins by default but this was met with hostility towards the modification from Microsoft. It's a shame but I eventually dropped the package from Debian (which I see you picked up bluca).