Files

T

William Woodruff 02e804e920 Scaffolding for uv audit (#18119 )

## Summary

This provides the scaffolding (CLI and initial `uv-audit` crate) for a
`uv audit` subcommand.

Closes #9189.

Tracking:

- [x] Core CLI scaffolding (this PR)
    - [x] #18185 
- [x] Audit core (probably a new `uv-audit` crate): #18124 
- [ ] Bulk dependency audits with OSV
- [ ] Result presentation
    - [ ] #18193 


Things that also need to be done with the MVP:

- [ ] We should not audit workspace members by default (by definition,
they don't exist on indices and therefore don't have meaningful results
from vulnerability services).
- [ ] I need to ensure groups/etc. are being filtered by correctly,
right now we audit every single package in the lockfile unconditionally.

## Test Plan

Unit and integration tests commensurate with the new functionality.

---------

Signed-off-by: William Woodruff <william@astral.sh>

2026-03-03 11:11:37 -05:00

src

Scaffolding for uv audit (#18119 )

2026-03-03 11:11:37 -05:00

Cargo.toml

Bump version to 0.10.7 (#18212 )

2026-02-27 07:07:47 -05:00

README.md

Bump version to 0.10.7 (#18212 )

2026-02-27 07:07:47 -05:00

README.md

uv-preview

This crate is an internal component of uv. The Rust API exposed here is unstable and will have frequent breaking changes.

This version (0.0.27) is a component of uv 0.10.7. The source can be found here.

See uv's crate versioning policy for details on versioning.