7 ms·

Author here. A.m.a

• tartieret 2y ago
  Great overview thanks I just reviewed uv for my team and there is one more reason against it, which isn't negligible for production-grade projects: Github Dependabot doesn't handle (yet) uv lock file. Supply chain management and vulnerability detection is such an important thing that it prevents the use of uv until this is resolved (the open github issue mentions the first quarter of 2025!)
  • BiteCode_dev 2y ago
    uv export?