@charliermarsh: Announcing uv audit: native support for vulnerability scanning across your project's dependencies
Summary
Charlie Marsh announces uv audit, a native vulnerability scanning feature for project dependencies in the uv package manager.
View Cached Full Text
Cached at: 06/16/26, 07:39 PM
Announcing uv audit: native support for vulnerability scanning across your project’s dependencies https://t.co/9LojxbyC8v
Similar Articles
Vulnerability and malware checks in uv
uv announces new security features: a fast dependency auditing command (uv audit) and optional malware scanning on sync operations, both currently in preview.
@charliermarsh: ty-pre-commit is out now! Pre-commit hooks for type checkers typically require you to either enumerate your dependencie…
ty-pre-commit is a new tool that simplifies pre-commit hooks for type checkers by automatically installing dependencies using uv.
@charliermarsh: This talk that I gave at Jane Street a year ago is by far the one that is referenced to me most in-person. People seem …
Charlie Marsh's talk explains how uv, a Rust-based Python package manager developed by Astral, solves dependency resolution with a CDCL SAT solver and a unified lockfile, achieving extreme speed by rethinking the toolchain from scratch.
Uv 0.12.0
uv 0.12.0 is a major release of the extremely fast Python package and project manager written in Rust, offering a replacement for pip, pip-tools, pipx, poetry, pyenv, twine, virtualenv, and more.
uv 0.12.0
uv 0.12.0 introduces breaking changes to `uv init`, defaulting to a `src/`-based package layout, configuring the uv_build backend, and setting up a script alias. The update encourages modern Python project structure.