IDEA: A #pip / #pipenv wrapper that reports back to you what it is going to install before it installs & reports the security rating/states/download counts, so you can decide if you really want to install it.
I think I just need to parse the output from
```python
--dry-run
```
and feed it into package info API calls.