Open
Description
Description
The Python packaging ecosystem is increasingly adopting uv
, a modern Python package manager and build tool developed by Astral. Some widely used packages, such as cryptography
, have started using uv
in their build workflows.
To accurately analyze and reproduce such projects, Macaron should support uv
as a recognized build tool.
Proposed Feature
Add support in Macaron for the uv
build system by:
- Detecting the presence of
uv
in build scripts or CI workflows (e.g. GitHub Actions usinguv
commands). - Recognizing
uv build
,uv pip
, and related commands. - Parsing
uv
-specific configuration and constraints (e.g.--build-constraint
,--require-hashes
).
Use Case
The cryptography
project is one example that uses uv
for reproducible, secure builds. Macaron currently may not be able to accurately interpret or reproduce such builds. By supporting uv
, Macaron can better analyze modern Python projects.