@charliermarsh: Announcing uv audit: native support for vulnerability scanning across your project's dependencies
Summary
Charlie Marsh announces uv audit, a native vulnerability scanning feature for project dependencies in the uv package manager.
View Cached Full Text
Cached at: 06/16/26, 07:39 PM
Announcing uv audit: native support for vulnerability scanning across your project’s dependencies https://t.co/9LojxbyC8v
Similar Articles
Vulnerability and malware checks in uv
uv announces new security features: a fast dependency auditing command (uv audit) and optional malware scanning on sync operations, both currently in preview.
@charliermarsh: ty-pre-commit is out now! Pre-commit hooks for type checkers typically require you to either enumerate your dependencie…
ty-pre-commit is a new tool that simplifies pre-commit hooks for type checkers by automatically installing dependencies using uv.
@charliermarsh: In preview, uv will now omit package metadata from the lockfile. (This is separate from the resolved dependency graph, …
In preview, uv will omit package metadata from the lockfile, reducing lockfile size by up to 50% on average and decreasing conflicts.
@charliermarsh: This talk that I gave at Jane Street a year ago is by far the one that is referenced to me most in-person. People seem …
Charlie Marsh's talk explains how uv, a Rust-based Python package manager developed by Astral, solves dependency resolution with a CDCL SAT solver and a unified lockfile, achieving extreme speed by rethinking the toolchain from scratch.
@charliermarsh: We now ship code-signed binaries for uv, for both macOS and Windows! This applies to our standalone installers and the …
uv now ships code-signed binaries for macOS and Windows, available in standalone installers and PyPI wheels, enhancing security and distribution.