uv-package-manager
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Includes official installation commands that fetch scripts from the vendor's domain (astral.sh) and official Docker images from the GitHub Container Registry (ghcr.io/astral-sh/uv).
- [COMMAND_EXECUTION]: Provides a wide range of command examples for using uv to manage Python projects, install dependencies, and run scripts within virtual environments.
- [REMOTE_CODE_EXECUTION]: Documents the standard installation process for uv which involves piping a remote shell script to the interpreter. This is the official and well-known distribution method for this tool.
Audit Metadata