Agreed, especially since there's a pypi package available.
And through a third party url shortener of all things?! There's no guarantee what'll come out the other side of a bit.ly link... At least leverage github directly, rather than add another level of indirection ...
Looking at the pointer: https://raw.githubusercontent.com/nicolargo/glancesautoinsta...
It doesn't even appear to support os x, installs via pip anyway (as root, unconditionally if you happen to have sudo credentials cached, or allow the script to elevate privileges).
This is probably never what you want, with the possible exception of a docker image, chroot/jail or similar.
And it really makes little sense to hard-depend on bash/sh for a cross-platform python utility - if pip install is too complicated, it shouldn't be too arduous to provide a sane python script for installation, that does most of this song and dance [and default to a virtual env] on all supported platforms. It's not like it can run without python, anyway...
A piped bash script might change per-client or per-request.
For the person who wants to read the source, I'll argue that pressing backspace 6 time to delete "| bash" is _more_ straightforward than looking up the source for a PyPi package.
There's only a subtle difference between a PyPi account and a server (script hosted on Github?) being pwned.
Though yes, I do believe they shouldn't have used an URL shortener.