Doesn’t uv just use PyPI for its packages (i.e. it’s not talking to any servers owned by them)? There’s the possibility of hijinks on the client side, of course, but it would be hard to do without anyone noticing and causing a huge stink about it.
I’d say the more worrying aspects of uv is the use of AI in its development even before OpenAI bought them out and what’s going to happen to it after OpenAI eventually goes under.
Yeah I used to be a huge advocate for Poetry and convinced my previous company to switch to it but it’s painfully slow when compared to UV so I can’t go back
Think about what they get by controlling a popular package manager. Think about what you give them.
You will not feel the consequences directly.
Doesn’t uv just use PyPI for its packages (i.e. it’s not talking to any servers owned by them)? There’s the possibility of hijinks on the client side, of course, but it would be hard to do without anyone noticing and causing a huge stink about it.
I’d say the more worrying aspects of uv is the use of AI in its development even before OpenAI bought them out and what’s going to happen to it after OpenAI eventually goes under.
what I do feel is how slow poetry is for resolving dependencies
Yeah I used to be a huge advocate for Poetry and convinced my previous company to switch to it but it’s painfully slow when compared to UV so I can’t go back