Credential-Zugriff
Reads Python index credentials, environment variables, and project configuration.
brew / Approval Gates / Rang 26
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für uv in AI-Agent-Workflows.
Agent-Sicherheit
uv manages Python environments, dependencies, tools, and package publishing workflows.
Reads Python index credentials, environment variables, and project configuration.
Can install packages, resolve remote indexes, and run project commands.
Can build or publish Python packages when paired with packaging commands.
Gate publishing and secret-backed index access; scan project env files first.
Allow lock/test operations; require approval for publish, credentialed index writes, and script execution using secrets.
Installation
brew install uvprovider-native install command
Überblick
Extremely fast Python package installer and resolver, written in Rust
Verlauf
uv is Astral's Rust-written Python package and project manager. It began as a fast installer and resolver for pip and pip-tools workflows, then expanded into a unified interface for dependency resolution, virtual environments, project management, scripts, tools, and Python installation.
Astral announced uv in February 2024 as the next tool in the same high-performance Python-tooling line as Ruff. The initial public framing was deliberately pragmatic: support common pip and pip-tools APIs under `uv pip`, provide a resolver, virtual environment creator, installer, sync command, and do so without requiring projects to rewrite their packaging workflow.
In August 2024 Astral announced a larger expansion of uv, describing it as moving beyond a pip alternative into an end-to-end solution for Python projects, command-line tools, single-file scripts, and Python itself. The official documentation later presented uv as a single tool replacing or overlapping pip, pip-tools, pipx, poetry, pyenv, twine, virtualenv, and related pieces of the Python packaging stack.
uv's adoption path was shaped by compatibility and speed rather than by a new packaging format alone. Astral emphasized that the first release was production-ready for existing pip and pip-tools workflows and required little configuration for those users.
Package-manager adoption followed the same low-friction pattern. The official installation documentation lists standalone installers, PyPI installation, Homebrew, MacPorts, WinGet, Scoop, Docker images, and other distribution routes, making uv easy to place in developer laptops, CI images, and reproducible build environments.
For package-nerd workflows, uv is commonly used as a faster `pip install`, `pip compile`, `pip sync`, `venv`, and `pipx`-style tool runner. In project mode, it centers dependency state around `pyproject.toml` and `uv.lock`, while retaining a `uv pip` interface for requirements-file and environment-oriented workflows.
The official docs call out a global cache, Cargo-style workspaces, cross-platform installation, and integrations for Docker, GitHub Actions, GitLab CI/CD, pre-commit, PyTorch, FastAPI, Bazel, and several private package registries. Those are the surfaces that made uv especially interesting to people who care about resolver behavior, lockfiles, build reproducibility, and CI runtime.
uv matters in package-manager culture because it compressed several long-standing Python packaging pain points into one fast executable: resolution, installation, environment creation, lockfile generation, tool execution, and Python runtime management. Its significance is not just that it is fast, but that it made speed available through familiar pip-shaped entry points before asking users to adopt its fuller project model.
It also accelerated the Rust-based rewrite trend in Python infrastructure. Like Ruff for linting and formatting, uv made performance a central product argument and forced comparisons with older Python-native tools such as pip-tools, Poetry, PDM, pipx, and virtualenv.
Approval Gates
Der lokale Approval-Gate-Seed enthält 6 Regeln für uv. Abgedeckte Einstiegspunkte: uv, uvx. Schweregrade: kritisch, hoch, mittel. Abdeckung: partial, geprüft am 2026-05-21.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Credential-bearing paths to review before unattended agent runs.
~/.local/share/uv/credentials/credentials.tomlExecutables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
uv | Executable | indexiertes Executable | Aus dem lokalen Executable-Index erkannt. |
uvx | Executable | indexiertes Executable | Aus dem lokalen Executable-Index erkannt. |
Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Installationsmetadaten
| Paketschlüssel | brew:uv |
|---|---|
| Version | 0.12.1 |
| Paketmanager | Homebrew |
| Homepage | https://docs.astral.sh/uv/ |
| Repository | https://github.com/astral-sh/uv |
| Zuletzt aktualisiert | 2026-07-31T22:19:31Z |
| Pulse | updated |
| Bottle | nicht erfasst |
| Dienst | keiner deklariert |
Quellspur
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
View the package source record on GitHub.