Forks of forks of forks, but which ones are patched? A vulnerability in the popular Rust crate async-tar has affected the fast uv Python package manager, which uses a forked version that's now patched ...

Astral, which makes high-performance Python tools such as the Ruff linter, has launched uv, an “extremely fast” Python package installer and resolver written in Rust. Designed as a drop-in replacement ...