An extremely fast Python package and project manager, written in Rust.
This report presents the forensic synthetic code analysis of astral-sh/uv, a Rust project with 87,438 GitHub stars. SynthScan v2.0 examined 514,557 lines of code across 1280 source files, recording 1286 pattern matches distributed across 17 syntactic categories. The overall adjusted score of 2.4 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 1286 distinct pattern matches across 17 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | Cargo.toml | 401 | # configuration and our benchmarking configuration, which is unfortunate. | COMMENT |
| LOW | crates/uv-auth/src/index.rs | 21 | #[serde(rename_all = "kebab-case")] | COMMENT |
| LOW | crates/uv-auth/src/store.rs | 61 | /// HTTP Basic Authentication | COMMENT |
| LOW | crates/uv-auth/src/middleware.rs | 321 | self | COMMENT |
| LOW | crates/uv-auth/src/middleware.rs | 341 | /// ## If the request only has a username | COMMENT |
| LOW | crates/uv-auth/src/realm.rs | 1 | use std::hash::{Hash, Hasher}; | COMMENT |
| LOW | crates/uv-keyring/tests/common/mod.rs | 1 | #![allow(dead_code)] // not all of these utilities are used by all tests | COMMENT |
| LOW | crates/uv-keyring/src/secret_service.rs | 101 | target: Option<String>, | COMMENT |
| LOW | crates/uv-keyring/src/secret_service.rs | 161 | COMMENT | |
| LOW | crates/uv-keyring/src/secret_service.rs | 361 | for item in &search.locked { | COMMENT |
| LOW | crates/uv-keyring/src/error.rs | 21 | /// without a `SemVer` break. Clients should always have default handling | COMMENT |
| LOW | crates/uv-keyring/src/error.rs | 41 | NoEntry, | COMMENT |
| LOW | crates/uv-keyring/src/lib.rs | 201 | /// The specific reasons for invalidity are platform-dependent, but include length constraints. | COMMENT |
| LOW | crates/uv-keyring/src/lib.rs | 221 | COMMENT | |
| LOW | crates/uv-keyring/src/lib.rs | 241 | /// Can return an [`Ambiguous`](Error::Ambiguous) error | COMMENT |
| LOW | crates/uv-keyring/src/lib.rs | 261 | } | COMMENT |
| LOW | crates/uv-keyring/src/lib.rs | 281 | /// | COMMENT |
| LOW | crates/uv-keyring/src/lib.rs | 301 | /// | COMMENT |
| LOW | crates/uv-keyring/src/lib.rs | 321 | /// on some platforms, and then only if a third-party | COMMENT |
| LOW | crates/uv-keyring/src/credential.rs | 41 | /// | COMMENT |
| LOW | crates/uv-keyring/src/credential.rs | 61 | } | COMMENT |
| LOW | crates/uv-keyring/src/credential.rs | 81 | /// Delete the underlying credential, if there is one. | COMMENT |
| LOW | crates/uv-keyring/src/windows.rs | 61 | /// See the module header for the meanings of these fields. | COMMENT |
| LOW | crates/uv-keyring/src/windows.rs | 101 | /// The new credential replaces any existing one in the store. | COMMENT |
| LOW | crates/uv-requirements/src/lookahead.rs | 21 | /// The lookahead resolver resolves requirements recursively for direct URLs, so that the resolver | COMMENT |
| LOW | crates/uv-requirements/src/specification.rs | 1 | //! Collecting the requirements to compile, sync or install. | COMMENT |
| LOW | crates/uv-platform-tags/src/tags.rs | 101 | /// `python_tag` |--> `abi_tag` |--> `platform_tag` |--> priority | COMMENT |
| LOW | crates/uv-platform/src/arch.rs | 21 | pub(crate) variant: Option<ArchVariant>, | COMMENT |
| LOW | crates/uv-platform/src/lib.rs | 221 | .cmp(&other.os.to_string()) | COMMENT |
| LOW | crates/uv-platform/src/cpuinfo.rs | 21 | } | COMMENT |
| LOW | crates/uv-scripts/src/lib.rs | 461 | /// Given the following input string representing the contents of a Python script: | COMMENT |
| LOW | crates/uv-scripts/src/lib.rs | 541 | // ```python | COMMENT |
| LOW | crates/uv-distribution/src/distribution_database.rs | 41 | use crate::{Error, LocalWheel, Reporter, RequiresDist}; | COMMENT |
| LOW | crates/uv-distribution/src/distribution_database.rs | 561 | /// instead be enforced by the caller. | COMMENT |
| LOW | crates/uv-distribution/src/index/built_wheel_index.rs | 281 | wheel, | COMMENT |
| LOW | crates/uv-distribution/src/metadata/lowering.rs | 281 | ) | COMMENT |
| LOW | …ates/uv-distribution/src/metadata/dependency_groups.rs | 21 | /// | COMMENT |
| LOW | crates/uv-distribution/src/metadata/requires_dist.rs | 301 | requires_dist: metadata.requires_dist, | COMMENT |
| LOW | crates/uv-distribution/src/metadata/requires_dist.rs | 321 | /// all = [ | COMMENT |
| LOW | crates/uv-distribution/src/metadata/requires_dist.rs | 341 | /// Or: | COMMENT |
| LOW | crates/uv-pep508/src/verbatim_url.rs | 21 | /// A wrapper around [`Url`] that preserves the original string. | COMMENT |
| LOW | crates/uv-pep508/src/verbatim_url.rs | 481 | COMMENT | |
| LOW | crates/uv-pep508/src/lib.rs | 1 | //! A library for [dependency specifiers](https://packaging.python.org/en/latest/specifications/dependency-specifiers/) | COMMENT |
| LOW | crates/uv-pep508/src/lib.rs | 61 | /// Error with a span attached. Not that those aren't `String` but `Vec<char>` indices. | COMMENT |
| LOW | crates/uv-pep508/src/lib.rs | 121 | /// We need this to allow anyhow's `.context()` and `AsDynError`. | COMMENT |
| LOW | crates/uv-pep508/src/lib.rs | 701 | /// | COMMENT |
| LOW | crates/uv-pep508/src/lib.rs | 901 | COMMENT | |
| LOW | crates/uv-pep508/src/unnamed.rs | 61 | } | COMMENT |
| LOW | crates/uv-pep508/src/unnamed.rs | 341 | /// - A semicolon (marker) or hash (comment), _preceded_ by a space. We parse the URL until the last | COMMENT |
| LOW | crates/uv-pep508/src/marker/lowering.rs | 41 | /// Critically, any variants that could be involved in a known-incompatible marker pair should | COMMENT |
| LOW | crates/uv-pep508/src/marker/algebra.rs | 1 | //! This module implements marker tree operations using Algebraic Decision Diagrams (ADD). | COMMENT |
| LOW | crates/uv-pep508/src/marker/algebra.rs | 21 | //! Specifically, a marker tree is represented as a Reduced Ordered ADD. An ADD is ordered if | COMMENT |
| LOW | crates/uv-pep508/src/marker/algebra.rs | 641 | self.create_node(value_node.var.clone(), children) | COMMENT |
| LOW | crates/uv-pep508/src/marker/algebra.rs | 861 | // subtle, but since 1) edges is a disjoint covering of the | COMMENT |
| LOW | crates/uv-pep508/src/marker/algebra.rs | 1161 | /// | COMMENT |
| LOW | crates/uv-pep508/src/marker/algebra.rs | 1181 | /// string marker and value. | COMMENT |
| LOW | crates/uv-pep508/src/marker/algebra.rs | 1301 | // The edges of a version variable, representing a disjoint set of ranges that cover | COMMENT |
| LOW | crates/uv-pep508/src/marker/algebra.rs | 1461 | } | COMMENT |
| LOW | crates/uv-pep508/src/marker/algebra.rs | 1521 | /// ``` | COMMENT |
| LOW | crates/uv-pep508/src/marker/algebra.rs | 1701 | }, | COMMENT |
| 1060 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | crates/uv-client/src/httpcache/mod.rs | 685 | if self.response.headers.cc.max_age_seconds.is_some() { | CODE |
| CRITICAL | crates/uv-client/src/httpcache/mod.rs | 694 | if self.config.shared && self.response.headers.cc.s_maxage_seconds.is_some() { | CODE |
| CRITICAL | crates/uv-client/src/httpcache/mod.rs | 731 | || self.response.headers.cc.s_maxage_seconds.is_some() | CODE |
| CRITICAL | crates/uv-client/src/httpcache/mod.rs | 860 | if let Some(&max_stale) = self.request.headers.cc.max_stale_seconds.as_ref() { | CODE |
| CRITICAL | crates/uv-client/src/httpcache/mod.rs | 930 | if let Some(&s_maxage) = self.response.headers.cc.s_maxage_seconds.as_ref() { | CODE |
| CRITICAL | crates/uv-client/src/httpcache/mod.rs | 939 | if let Some(&max_age) = self.response.headers.cc.max_age_seconds.as_ref() { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | crates/uv-python/python/packaging/__init__.py | 1 | # This file is dual licensed under the terms of the Apache License, Version | COMMENT |
| MEDIUM | test/requirements/transformers/pyproject.toml | 1 | # This file is a translation of | COMMENT |
| MEDIUM | scripts/uv-run-remote-script-test.py | 1 | # This file is used to test `uv run <url>` in ../crates/uv/tests/run.rs | COMMENT |
| MEDIUM | scripts/update_schemastore.py | 34 | # Create a new branch tagged with the current uv commit up to date with the latest | COMMENT |
| MEDIUM | scripts/check_embedded_python.py | 23 | # Create a temporary directory. | COMMENT |
| MEDIUM | scripts/check_embedded_python.py | 25 | # Create a virtual environment with `uv`. | COMMENT |
| MEDIUM | scripts/check_cache_compat.py | 122 | # Create a temporary directory. | COMMENT |
| MEDIUM | scripts/check_system_python.py | 134 | # Create a temporary directory. | COMMENT |
| MEDIUM | scripts/check_system_python.py | 189 | # Create a virtual environment with `uv`. | COMMENT |
| MEDIUM | scripts/benchmark/src/benchmark/resolver.py | 356 | # Create a Poetry project. | COMMENT |
| MEDIUM | scripts/benchmark/src/benchmark/resolver.py | 640 | # Create a PDM project. | COMMENT |
| MEDIUM | scripts/benchmark/src/benchmark/resolver.py | 1037 | # Create a Poetry project. | COMMENT |
| MEDIUM | scripts/smoke-test/commands.sh | 10 | # Create a virtual environment and install a package with `uv pip` | COMMENT |
| MEDIUM | .github/workflows/release.yml | 308 | # Create a GitHub Release while uploading all files to it | COMMENT |
| MEDIUM | .github/workflows/release.yml | 334 | # Create a GitHub Release while uploading all files to it | COMMENT |
| MEDIUM | .github/workflows/build-docker.yml | 288 | # Initialize a variable to store all tag docker metadata patterns | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/uv-build/python/uv_build/__init__.py | 21 | CODE | |
| LOW | crates/uv-build/python/uv_build/__init__.py | 21 | CODE | |
| LOW | crates/uv-build/python/uv_build/__init__.py | 22 | CODE | |
| LOW | crates/uv-virtualenv/src/activator/activate_this.py | 31 | CODE | |
| LOW | crates/uv-python/python/get_interpreter_info.py | 666 | CODE | |
| LOW | crates/uv-python/python/packaging/_manylinux.py | 8 | CODE | |
| LOW | …ed/excluded/bird-feeder/check_installed_bird_feeder.py | 1 | CODE | |
| LOW | …ed/excluded/bird-feeder/check_installed_bird_feeder.py | 4 | CODE | |
| LOW | …luded/excluded/bird-feeder/src/bird_feeder/__init__.py | 1 | CODE | |
| LOW | …oject-in-excluded/packages/seeds/src/seeds/__init__.py | 1 | CODE | |
| LOW | …lbatross-project-in-excluded/src/albatross/__init__.py | 1 | CODE | |
| LOW | …ce/packages/bird-feeder/check_installed_bird_feeder.py | 1 | CODE | |
| LOW | …ce/packages/bird-feeder/check_installed_bird_feeder.py | 4 | CODE | |
| LOW | …space/packages/bird-feeder/src/bird_feeder/__init__.py | 1 | CODE | |
| LOW | …ss-root-workspace/packages/seeds/src/seeds/__init__.py | 1 | CODE | |
| LOW | …ces/albatross-root-workspace/src/albatross/__init__.py | 1 | CODE | |
| LOW | …ce/packages/bird-feeder/check_installed_bird_feeder.py | 1 | CODE | |
| LOW | …ce/packages/bird-feeder/check_installed_bird_feeder.py | 4 | CODE | |
| LOW | …space/packages/bird-feeder/src/bird_feeder/__init__.py | 1 | CODE | |
| LOW | …virtual-workspace/packages/seeds/src/seeds/__init__.py | 1 | CODE | |
| LOW | …workspace/packages/albatross/src/albatross/__init__.py | 1 | CODE | |
| LOW | …aces/albatross-in-example/check_installed_albatross.py | 4 | CODE | |
| LOW | …le/examples/bird-feeder/check_installed_bird_feeder.py | 1 | CODE | |
| LOW | …le/examples/bird-feeder/check_installed_bird_feeder.py | 4 | CODE | |
| LOW | …ample/examples/bird-feeder/src/bird_feeder/__init__.py | 1 | CODE | |
| LOW | …kspaces/albatross-in-example/src/albatross/__init__.py | 1 | CODE | |
| LOW | …deptry_reproducer/python/deptry_reproducer/__init__.py | 1 | CODE | |
| LOW | …ges/built-by-uv/src/built_by_uv/arithmetic/__init__.py | 1 | CODE | |
| LOW | python/uv/_find_uv.py | 1 | CODE | |
| LOW | python/uv/__init__.py | 1 | CODE | |
| LOW | python/uv/__init__.py | 3 | CODE | |
| LOW | scripts/publish-crates.py | 12 | CODE | |
| LOW | scripts/update_schemastore.py | 8 | CODE | |
| LOW | scripts/sync-python-version-constants.py | 19 | CODE | |
| LOW | scripts/check_cache_compat.py | 7 | CODE | |
| LOW | scripts/vendor-packaging.py | 16 | CODE | |
| LOW | scripts/check_system_python.py | 126 | CODE | |
| LOW | scripts/generate-known-stdlib.py | 8 | CODE | |
| LOW | scripts/transform_readme.py | 8 | CODE | |
| LOW | scripts/update-latest-changelog-section.py | 7 | CODE | |
| LOW | scripts/patch-dist-manifest-checksums.py | 10 | CODE | |
| LOW | scripts/check-trampoline-version-consistency.py | 12 | CODE | |
| LOW | scripts/setup-crates-io-publish.py | 25 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | crates/uv-types/src/traits.rs | 68 | /// ┌────────────────┐ | COMMENT |
| MEDIUM⚡ | crates/uv-types/src/traits.rs | 70 | /// └───────▲────────┘ | COMMENT |
| MEDIUM⚡ | crates/uv-types/src/traits.rs | 73 | /// ┌───────┴────────┐ | COMMENT |
| MEDIUM⚡ | crates/uv-types/src/traits.rs | 74 | /// ┌─────────►│ uv-dispatch │◄─────────┐ | COMMENT |
| MEDIUM⚡ | crates/uv-types/src/traits.rs | 75 | /// │ └───────▲────────┘ │ | COMMENT |
| MEDIUM⚡ | crates/uv-types/src/traits.rs | 78 | /// ┌───────┴────────┐ ┌───────┴────────┐ ┌────────┴────────────────┐ | COMMENT |
| MEDIUM⚡ | crates/uv-types/src/traits.rs | 80 | /// └───────▲────────┘ └───────▲────────┘ └────────▲────────────────┘ | COMMENT |
| MEDIUM⚡ | crates/uv-types/src/traits.rs | 82 | /// └─────────────┐ │ ┌──────────────┘ | COMMENT |
| MEDIUM⚡ | crates/uv-types/src/traits.rs | 85 | /// └────────────────┘ | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | crates/uv-distribution-types/src/any.rs | 75 | /// Like [`InstalledVersion`], but with [`CanonicalUrl`] to ensure robust URL comparisons. | COMMENT |
| MEDIUM | crates/uv-client/src/httpcache/mod.rs | 254 | /// whether a new request can utilize a cached response or not. This is | COMMENT |
| MEDIUM | crates/uv-extract/src/stream.rs | 520 | // that leverage this feature anyway. | COMMENT |
| MEDIUM | crates/uv-windows/src/exception.rs | 37 | /// halfway through a Rust operation. It needs to be robust to operating with unknown program | COMMENT |
| MEDIUM | crates/uv/tests/project/init.rs | 1937 | // robust to errors in discovery. | COMMENT |
| MEDIUM | crates/uv-trampoline/src/bounce.rs | 198 | /// PEP 405 specifies a more robust procedure (checking both the parent and grandparent | COMMENT |
| MEDIUM | crates/uv-trampoline/src/bounce.rs | 434 | // See also <https://github.com/astral-sh/uv/pull/18170> which explores a more robust solution | COMMENT |
| MEDIUM | crates/uv-build-frontend/src/lib.rs | 762 | // allow us to leverage the hook in _most_ cases while still avoiding incorrect metadata for | COMMENT |
| MEDIUM | crates/uv-python/src/environment.rs | 326 | // should be generally robust. | COMMENT |
| MEDIUM | crates/uv-python/src/interpreter.rs | 156 | /// This routine mimics the CPython `getpath.py` logic in order to make a more robust assessment | COMMENT |
| LOW | python/uv/__main__.py | 12 | # If it's already set, then just use it | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | dist-workspace.toml | 57 | # Whether CI should include auto-generated code to build local artifacts | COMMENT |
| HIGH | crates/uv-types/src/requirements.rs | 33 | /// A set of requirements as requested by a parent requirement. | COMMENT |
| HIGH | crates/uv-resolver/src/error.rs | 583 | /// negative terms) are shown as requested. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | crates/uv-build/python/uv_build/__init__.py | 92 | def get_requires_for_build_sdist( | CODE |
| LOW⚡ | crates/uv-build/python/uv_build/__init__.py | 100 | def get_requires_for_build_wheel( | CODE |
| LOW⚡ | crates/uv-build/python/uv_build/__init__.py | 108 | def prepare_metadata_for_build_wheel( | CODE |
| LOW | crates/uv-build/python/uv_build/__init__.py | 128 | def get_requires_for_build_editable( | CODE |
| LOW | crates/uv-build/python/uv_build/__init__.py | 136 | def prepare_metadata_for_build_editable( | CODE |
| LOW | crates/uv/tests/sync/sync.rs | 6457 | def prepare_metadata_for_build_editable(metadata_directory, config_settings=None): | CODE |
| LOW | crates/uv-python/python/get_interpreter_info.py | 110 | def _running_under_legacy_virtualenv() -> bool: | CODE |
| LOW | crates/uv-python/python/get_interpreter_info.py | 283 | def _should_use_osx_framework_prefix() -> bool: | CODE |
| LOW | crates/uv-python/python/get_interpreter_info.py | 420 | def get_operating_system_and_architecture(): | CODE |
| LOW | crates/uv-python/python/packaging/_manylinux.py | 83 | def _glibc_version_string_confstr() -> "str | None": | CODE |
| LOW | crates/uv-python/python/packaging/_manylinux.py | 102 | def _glibc_version_string_ctypes() -> "str | None": | CODE |
| LOW | scripts/publish-crates.py | 110 | def build_cargo_publish_command( | CODE |
| LOW | scripts/create-python-mirror.py | 65 | def collect_metadata_from_git_history() -> List[Dict]: | CODE |
| LOW | scripts/check-trampoline-version-consistency.py | 21 | def get_locked_windows_version(lockfile_path: Path) -> str | None: | CODE |
| LOW | scripts/setup-crates-io-publish.py | 114 | def load_workspace_package_metadata() -> dict[str, object]: | CODE |
| LOW | scripts/setup-crates-io-publish.py | 123 | def publish_placeholder_crate( | CODE |
| LOW | scripts/setup-crates-io-publish.py | 248 | def handle_trusted_publisher_error(exc: httpx.HTTPStatusError) -> None: | CODE |
| LOW | scripts/publish/test_publish.py | 287 | def check_index_for_provenance( | CODE |
| LOW | scripts/publish/test_publish.py | 562 | def test_reupload_with_check_url( | CODE |
| LOW | scripts/publish/test_publish.py | 630 | def test_reupload_modified_files( | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/uv-publish/src/lib.rs | 752 | // Step 1: Reserve an upload slot. | COMMENT |
| LOW | crates/uv-publish/src/lib.rs | 807 | // Step 2: Upload the file directly to S3 (if needed). | COMMENT |
| LOW | crates/uv-publish/src/lib.rs | 911 | // Step 3: Finalize the upload. | COMMENT |
| LOW | crates/uv/tests/pip_install/pip_install.rs | 15884 | // Step 1: Install as editable first. | COMMENT |
| LOW | crates/uv/tests/pip_install/pip_install.rs | 15900 | // Step 2: Use `--no-sources`; we should retain the package. | COMMENT |
| LOW | crates/uv/tests/sync/sync.rs | 16983 | // Step 1: `uv sync --no-sources` should install `anyio` from PyPI. | COMMENT |
| LOW | crates/uv/tests/sync/sync.rs | 16999 | // Step 2: `uv sync` should switch to an editable installation. | COMMENT |
| LOW | crates/uv/tests/sync/sync.rs | 17016 | // Step 3: `uv sync --no-sources` again should switch back to PyPI package. | COMMENT |
| LOW | crates/uv/src/commands/pip/tree.rs | 238 | // Step 1: Add each installed package. | COMMENT |
| LOW | crates/uv/src/commands/pip/tree.rs | 252 | // Step 2: Add all dependencies. | COMMENT |
| LOW⚡ | crates/uv/src/commands/pip/tree.rs | 286 | // Step 2: Reverse the graph. | COMMENT |
| LOW⚡ | crates/uv/src/commands/pip/tree.rs | 291 | // Step 3: Filter the graph to those nodes reachable from the target packages. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/uv-publish/src/lib.rs | 752 | // Step 1: Reserve an upload slot. | COMMENT |
| LOW | crates/uv-publish/src/lib.rs | 807 | // Step 2: Upload the file directly to S3 (if needed). | COMMENT |
| LOW | crates/uv-publish/src/lib.rs | 911 | // Step 3: Finalize the upload. | COMMENT |
| LOW | crates/uv/tests/pip_install/pip_install.rs | 15884 | // Step 1: Install as editable first. | COMMENT |
| LOW | crates/uv/tests/pip_install/pip_install.rs | 15900 | // Step 2: Use `--no-sources`; we should retain the package. | COMMENT |
| LOW | crates/uv/src/commands/pip/tree.rs | 238 | // Step 1: Add each installed package. | COMMENT |
| LOW | crates/uv/src/commands/pip/tree.rs | 252 | // Step 2: Add all dependencies. | COMMENT |
| LOW⚡ | crates/uv/src/commands/pip/tree.rs | 286 | // Step 2: Reverse the graph. | COMMENT |
| LOW⚡ | crates/uv/src/commands/pip/tree.rs | 291 | // Step 3: Filter the graph to those nodes reachable from the target packages. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/publish-crates.py | 8 | # Usage: | COMMENT |
| LOW | scripts/install-cargo-extensions.sh | 8 | ## Usage: | COMMENT |
| LOW | scripts/check-release-artifact-sboms.sh | 7 | ## Usage: | COMMENT |
| LOW | scripts/codesign-macos.sh | 5 | # Usage: | COMMENT |
| LOW | scripts/nextest-setup-hook-unix.sh | 7 | # Usage: | COMMENT |
| LOW | scripts/apply-ci-snapshots.sh | 4 | # Usage: | COMMENT |
| LOW | scripts/cargo.sh | 6 | ## Usage: | COMMENT |
| LOW | scripts/setup-crates-io-publish.py | 16 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/uv-virtualenv/src/_virtualenv.py | 51 | CODE | |
| LOW | crates/uv-python/fetch-download-metadata.py | 218 | CODE | |
| LOW | crates/uv-python/fetch-download-metadata.py | 572 | CODE | |
| LOW | crates/uv-python/fetch-download-metadata.py | 682 | CODE | |
| LOW | crates/uv-python/python/get_interpreter_info.py | 420 | CODE | |
| LOW | crates/uv-python/python/packaging/_manylinux.py | 214 | CODE | |
| LOW | agents/hooks/post-edit-format.py | 49 | CODE | |
| LOW | scripts/registries-test.py | 69 | CODE | |
| LOW | scripts/registries-test.py | 170 | CODE | |
| LOW | scripts/setup-crates-io-publish.py | 276 | CODE | |
| LOW | scripts/publish/test_publish.py | 717 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | crates/uv/tests/project/run.rs | 4498 | print(f"Error: Expected pythonw.exe but got: {executable}", file=sys.stderr) | CODE |
| LOW | scripts/registries-test.py | 257 | except Exception as e: | CODE |
| LOW | scripts/registries-test.py | 339 | except Exception as e: | CODE |
| MEDIUM | scripts/repair-sdist-cargo-lock.py | 26 | print(f"Error: {sdist_path} is not a valid tar file", file=sys.stderr) | CODE |
| LOW | scripts/create-python-mirror.py | 87 | except Exception as e: | CODE |
| LOW | scripts/create-python-mirror.py | 183 | except Exception as e: | CODE |
| LOW | scripts/create-python-mirror.py | 287 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ges/built-by-uv/src/built_by_uv/arithmetic/__init__.py | 3 | __all__ = ["circle_area"] | CODE |
| LOW | python/uv/__init__.py | 5 | __all__ = ["find_uv_bin"] | CODE |
| LOW | scripts/update_schemastore.py | 21 | def update_schemastore(schemastore: Path, *, root: Path) -> None: | CODE |
| LOW | scripts/create-python-mirror.py | 42 | logger = logging.getLogger(__name__) | CODE |
| LOW | scripts/setup-crates-io-publish.py | 229 | def set_trustpub_only(client: httpx.Client, crate_name: str, enabled: bool) -> None: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | scripts/update_schemastore.py | 70 | # Check if the schema has changed | COMMENT |
| LOW | scripts/nextest-setup-hook-unix.sh | 18 | # Set UV_TEST_CODESIGN_IDENTITY to enable signing. See `scripts/codesign-macos.sh`. | COMMENT |
| LOW | scripts/apply-ci-snapshots.sh | 83 | # Check if any artifacts were downloaded | COMMENT |
| LOW | scripts/generate-crate-readmes.py | 123 | # Check if README already exists | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | crates/uv-cache/src/lib.rs | 401 | /// Populate the cache scaffold. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | crates/uv/tests/project/edit.rs | 11272 | packages.child("placeholder").touch()?; | CODE |