lab icon indicating copy to clipboard operation
lab copied to clipboard

Avoid installing uv by blindly executing a script

Open Martin1887 opened this issue 8 months ago • 0 comments

Blindly executing a script is a potential security issue easy to avoid. Describing its potential harness may not only avoid installing malware in case the official URL is compromised but also teach a basic security measure to the readers.

I am not sure where this README.md is shown, but I think that something like this should be used for all installation instructions.

Note: Other methods to install uv exist, like Nix, devenv.sh or compiling with cargo, but listing all installation methods is probably overwhelming and overkill.

Martin1887 avatar Apr 26 '25 16:04 Martin1887