diff --git a/third_party/py/BUILD b/third_party/py/BUILD
index eadbafd..efa4a96 100644
--- a/third_party/py/BUILD
+++ b/third_party/py/BUILD
@@ -1,4 +1,7 @@
 load("@rules_python//python:pip.bzl", "compile_pip_requirements")
+
 compile_pip_requirements(
     name = "requirements",
+    # Allow setuptools and friends to be pulled in as @pydeps_setuptools.
+    extra_args = ["--allow-unsafe"],
 )