The Python Software Foundation warned users this week that threat actors are trying to steal their credentials in phishing attacks using a fake Python Package Index (PyPI) website.

But annotating four million lines of Python code in this way isn’t a straightforward task, here are some of the lesser-known benefits and how Dropbox accomplished the task.