verticalpalette

Actually, I think this library could provide a security benefit since generating code by string concatenation is generally dagnerous. Analogous to generating HTML or SQL -- safer to use a library than to construct it yourself.

As for number 4, this is because many of the type annotations are optional.

I've already replied to nochuck13's comment, but I'll add it here as well.

For #3, access to your public profile AND friend list really is the minimum level of access you can ask from the Facebook API. See https://developers.facebook.com/docs/reference/login/public-....

It is. From https://developers.facebook.com/docs/reference/login/public-...: "When a user logs into your app and you request no additional permissions, the app will have access to only the user's public profile and friend list."