An easy way to manually audit changes in package updates

[R9295]

Hello all,

Recently, I've been working on Customs-Inspector, a proof of concept plugin that hooks into poetry update, generates a diff for package updates and asks you to audit before updating.

Here's a YouTube demo

I think this would really help in finding malicious packages quickly by harnessing the collective power of the Python community.
With language server support and a couple of other things, Customs-Inspector could become a really complete and efficient solution for manually auditing changes. I would love to see this integrated into poetry as poetry update --audit

Looking forward to your thoughts