Crate uv_audit 

uv-audit provides types and interfaces for auditing Python dependencies.

Modules

osv

Types and interfaces for interacting with OSV as a vulnerability service.

Structs

Dependency

Represents a resolved dependency, with a normalized name and PEP 440 version.

ProjectStatus

An adverse project status, such as an archived or deprecated project.

ProjectStatusAudit

Audit projects for PEP 792 adverse status markers using a RegistryClient.

Vulnerability

A vulnerability within a dependency.

VulnerabilityID

An opaque identifier for a vulnerability. These are conventionally formatted as SRC-XXXX-YYYY, where SRC is an identifier for the vulnerability source, XXXX is typically a year or other “bucket” identifier, and YYYY is a unique identifier within that bucket. For example, CVE-2026-12345 or PYSEC-2023-0001.

Enums

AdverseStatus

Represents an “adverse” project status, i.e. a status that indicates that a downstream user of the project should review their use of the project and consider removing it.

Finding

Represents a finding on a dependency.

VulnerabilityServiceFormat

The shape of the vulnerability service.