Fähigkeiten uv-package-manager
📦

uv-package-manager

Sicher

Master uv Package Manager

Auch verfügbar von: wshobson,ActiveInferenceInstitute

uv is an extremely fast Python package manager written in Rust. This skill helps you set up projects, manage dependencies, and optimize Python workflows with uv's blazing-fast performance.

Unterstützt: Claude Codex Code(CC)
📊 71 Angemessen
1

Die Skill-ZIP herunterladen

2

In Claude hochladen

Gehe zu Einstellungen → Fähigkeiten → Skills → Skill hochladen

3

Einschalten und loslegen

Teste es

Verwendung von "uv-package-manager". Initialize a new Python project with uv

Erwartetes Ergebnis:

Run: uv init my-project
This creates: pyproject.toml, .python-version, README.md, .gitignore
Then: cd my-project
Then: uv add requests pandas

Verwendung von "uv-package-manager". Setup fast CI/CD with uv

Erwartetes Ergebnis:

Use: uv sync --frozen for exact reproducible installs
Enable caching with: enable-cache: true in GitHub Actions
Install Python: uv python install 3.12

Sicherheitsaudit

Sicher
v1 • 2/25/2026

This skill is a documentation and guide for the legitimate uv Python package manager. The static analysis flagged 103 potential issues, but upon evaluation, all findings are false positives. The detected patterns (external commands, network URLs, filesystem access) are bash code examples within markdown documentation blocks, not executable code. The skill provides educational content about uv installation and usage - a trusted tool from Astral. No malicious intent detected.

2
Gescannte Dateien
871
Analysierte Zeilen
4
befunde
1
Gesamtzahl Audits

Probleme mit hohem Risiko (1)

Pipe to Shell Pattern
Installation command uses pipe to shell pattern: `curl -LsSf https://astral.sh/uv/install.sh | sh`. This is the official, recommended installation method from Astral (the creators of uv). While this pattern is flagged by static analyzers, it is a known and accepted pattern for installing development tools from trusted sources.
Probleme mit mittlerem Risiko (3)
Shell Command Examples in Documentation
Static scanner detected 77 instances of shell command patterns (backticks) in documentation. These are example commands in markdown code blocks for educational purposes, not executable code. Examples include `uv add`, `uv sync`, `uv venv` - all legitimate uv commands shown as documentation.
Hardcoded URLs in Documentation
URLs detected in documentation point to legitimate uv resources: astral.sh (official site), github.com/astral-sh/uv (official repo), docs.astral.sh (documentation). These are appropriate references for a documentation skill.
Filesystem References in Documentation
References to filesystem paths like .venv, .gitignore, .python-version, and cache directories (~/.cache/uv) are standard Python project files managed by uv. These are documented for educational purposes.
Auditiert von: claude

Qualitätsbewertung

38
Architektur
100
Wartbarkeit
87
Inhalt
50
Community
80
Sicherheit
100
Spezifikationskonformität

Was du bauen kannst

Quick Python Project Setup

Rapidly initialize a new Python project with virtual environment, install dependencies, and start coding in seconds instead of minutes.

Dependency Management at Scale

Manage complex dependency trees, resolve conflicts, and maintain reproducible builds with lockfiles for production projects.

CI/CD Pipeline Optimization

Speed up CI/CD pipelines by using uv for faster dependency installation and cached builds.

Probiere diese Prompts

Install uv and Create Project
Help me install uv package manager and create a new Python project with a virtual environment.
Add Dependencies
Show me how to add dependencies to my Python project using uv. I want to add requests, pandas, and pytest.
Setup Lockfile
Explain how to use uv lockfiles for reproducible builds and how to integrate them in CI/CD.
Docker Integration
Show me how to optimize a Python Docker image using uv for faster builds and smaller images.

Bewährte Verfahren

  • Always use lockfiles (uv.lock) for reproducible builds in production
  • Pin Python versions with .python-version file for consistency
  • Use 'uv run' instead of manually activating virtual environments

Vermeiden

  • Do not skip lockfiles in production - they ensure deterministic builds
  • Avoid installing uv via pip in Docker builds - use the official installer
  • Do not ignore Python version compatibility - pin versions explicitly

Häufig gestellte Fragen

What is uv and why is it faster than pip?
uv is written in Rust and uses parallel dependency resolution. It caches packages globally and installs in parallel, making it 10-100x faster than pip.
Do I need Python installed to use uv?
No, uv can install itself and Python versions without requiring Python pre-installed. This makes it ideal for new project setups.
How do I migrate from pip to uv?
Run 'uv add -r requirements.txt' to convert existing requirements, or simply use 'uv sync' if you have a pyproject.toml. uv is compatible with pip workflows.
What are lockfiles and why should I use them?
Lockfiles (uv.lock) record exact dependency versions installed. This ensures every environment uses identical package versions, preventing 'works on my machine' issues.
Can uv work with Docker?
Yes, uv is excellent for Docker. Use multi-stage builds with 'COPY --from=ghcr.io/astral-sh/uv:latest' for fast, cached dependency installation.
Is uv safe for production use?
Yes, uv is actively maintained by Astral (the creators of Ruff) and is used in production by many projects. It supports signed packages and hash verification.