Monitor core imports from extensions

lnbits / lnbits

LNbits, free and open-source Lightning wallet and accounts system.

https://lnbits.com

MIT License

1.01k stars 329 forks source link

Open motorina0 opened 5 months ago

motorina0 commented 5 months ago

all APIs from core that are allowed for extensions to use should be grouped under one namespace.
extensions should not be allowed to dynamically import modules ( reject importlib.import_module("lnbits.wallets") and its friends)
relative imports from core must not be allowed
on extension install the user should see what permissions are required

dni commented 5 months ago

i like to explicity export all the important stuff in the root __init__.py like here in lnurl. https://github.com/lnbits/lnurl/blob/main/lnurl/__init__.py