Uh oh. I am thinking all the ways this can be misused to ship malicious dependen... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		abhisek 5 months ago \| parent \| context \| favorite \| on: Uv: Running a script with dependencies Uh oh. I am thinking all the ways this can be misused to ship malicious dependencies. Pretty much all SCA tools today will be blind to this.

ndr 5 months ago [–]

why would you ship `uv` though?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact