pkg.sopackage field notes

brew / 审批门 / 排名 26

使用 Homebrew 安装 uv

查看 uv 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

代理安全

代理安全回答

uv manages Python environments, dependencies, tools, and package publishing workflows.

凭据访问

Reads Python index credentials, environment variables, and project configuration.

远程变更

Can install packages, resolve remote indexes, and run project commands.

发布/制品风险

Can build or publish Python packages when paired with packaging commands.

推荐控制

Gate publishing and secret-backed index access; scan project env files first.

代理使用指南

Allow lock/test operations; require approval for publish, credentialed index writes, and script execution using secrets.

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install uv

provider-native install command

概览

软件包摘要

Extremely fast Python package installer and resolver, written in Rust

命令和别名

  • uv
  • uvx

历史

项目历史与用法

uv is Astral's Rust-written Python package and project manager. It began as a fast installer and resolver for pip and pip-tools workflows, then expanded into a unified interface for dependency resolution, virtual environments, project management, scripts, tools, and Python installation.

项目历史

Astral announced uv in February 2024 as the next tool in the same high-performance Python-tooling line as Ruff. The initial public framing was deliberately pragmatic: support common pip and pip-tools APIs under `uv pip`, provide a resolver, virtual environment creator, installer, sync command, and do so without requiring projects to rewrite their packaging workflow.

In August 2024 Astral announced a larger expansion of uv, describing it as moving beyond a pip alternative into an end-to-end solution for Python projects, command-line tools, single-file scripts, and Python itself. The official documentation later presented uv as a single tool replacing or overlapping pip, pip-tools, pipx, poetry, pyenv, twine, virtualenv, and related pieces of the Python packaging stack.

采用历史

uv's adoption path was shaped by compatibility and speed rather than by a new packaging format alone. Astral emphasized that the first release was production-ready for existing pip and pip-tools workflows and required little configuration for those users.

Package-manager adoption followed the same low-friction pattern. The official installation documentation lists standalone installers, PyPI installation, Homebrew, MacPorts, WinGet, Scoop, Docker images, and other distribution routes, making uv easy to place in developer laptops, CI images, and reproducible build environments.

使用方式

For package-nerd workflows, uv is commonly used as a faster `pip install`, `pip compile`, `pip sync`, `venv`, and `pipx`-style tool runner. In project mode, it centers dependency state around `pyproject.toml` and `uv.lock`, while retaining a `uv pip` interface for requirements-file and environment-oriented workflows.

The official docs call out a global cache, Cargo-style workspaces, cross-platform installation, and integrations for Docker, GitHub Actions, GitLab CI/CD, pre-commit, PyTorch, FastAPI, Bazel, and several private package registries. Those are the surfaces that made uv especially interesting to people who care about resolver behavior, lockfiles, build reproducibility, and CI runtime.

为什么软件包爱好者会关心

uv matters in package-manager culture because it compressed several long-standing Python packaging pain points into one fast executable: resolution, installation, environment creation, lockfile generation, tool execution, and Python runtime management. Its significance is not just that it is fast, but that it made speed available through familiar pip-shaped entry points before asking users to adopt its fuller project model.

It also accelerated the Rust-based rewrite trend in Python infrastructure. Like Ruff for linting and formatting, uv made performance a central product argument and forced comparisons with older Python-native tools such as pip-tools, Poetry, PDM, pipx, and virtualenv.

时间线

  • 2024-02: Astral announced uv as a fast Python package installer and resolver written in Rust.
  • 2024-08: Astral announced uv's expansion into unified Python packaging, including projects, tools, scripts, and Python installation.
  • 2024-2026: Official docs list uv across standalone installers, PyPI, Homebrew, MacPorts, WinGet, Scoop, Docker, and CI integrations.

Related projects

  • Ruff is Astral's earlier Rust-written Python linter and formatter and is the closest sibling in toolchain philosophy.
  • pip, pip-tools, pipx, Poetry, PDM, pyenv, twine, and virtualenv are the tools uv explicitly overlaps with or replaces in common Python packaging workflows.

来源

审批门

高风险命令的人工审核元数据

本地审批门种子包含 6 条适用于 uv 的规则。覆盖的入口点:uv, uvx。严重级别:严重, 高, 中。覆盖状态:partial,审核于 2026-05-21。

受控操作示例

  • Publish distributions to a Python package index.
  • Install Python packages into an environment.
  • Remove Python packages from an environment.
  • Resolve dependencies and execute a command or script.
  • Synchronize an environment to lockfile or project metadata.
  • Download and execute a Python tool package.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.local/share/uv/credentials/credentials.toml

可执行文件

已安装的可执行文件

命令类型暴露范围备注
uv可执行文件已索引可执行文件从本地可执行文件索引发现。
uvx可执行文件已索引可执行文件从本地可执行文件索引发现。

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。

页面生成时间2026-08-03
管理器版本0.12.1
管理器更新时间2026-07-31
本地数据未知
上游不可用
检测到的最新版本未检测到
  • OK没有生成新鲜度警告。

安装元数据

软件包元数据

软件包键brew:uv
版本0.12.1
软件包管理器Homebrew
主页https://docs.astral.sh/uv/
仓库https://github.com/astral-sh/uv
最后更新2026-07-31T22:19:31Z
Pulseupdated
Bottle未记录
服务未声明

来源线索

由仓库数据生成

此页面由 av-webscripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

Combined YAML source

View the package source record on GitHub.

combined/uv.yml

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • approval-gate seed metadata
  • curated agent safety answer
  • curated configuration and credential file locations
  • curated package history
  • pkgdb category and tag curation