
Security News
CVE Volume Surges Past 48,000 in 2025 as WordPress Plugin Ecosystem Drives Growth
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.
uvenv
Advanced tools
Inspired by:
New:
uvenvis now also installable via the snap store.
Thepipmethod is still recommended, but if you want to usesnap, please check out docs/snap.md!
pip install uvenv
# or `uv install uvenv`, `pipx install uvenv`
Note: On some systems (e.g., Ubuntu 24.04+), global installation via pip is restricted by default. The recommended way to install
uvenvfor these systems is to use theinstall.shscript:$SHELL -c "$(curl -fsSL https://raw.githubusercontent.com/robinvandernoord/uvenv/uvenv/install.sh)" # instead of `$SHELL`, you can also use `sh`, `bash`, `zsh` > ``` For more installation alternatives, see [docs/installation.md](docs/installation.md) if you encounter `externally-managed-environment` errors.
Optional (for bash users):
uvenv setup
This installs the following features:
~/.local/bin/ is added to your PATH, so commands can be found (unless --skip-ensurepath). Can also be
activated via uvenv ensurepathuvenv (unless --skip-completions). Can also be enabled
via uvenv completions --install.uvenv activate (unless --skip-activate) to activate uvenv-managed virtualenvs from your shelluvenv
Most pipx commands are supported, such as install, upgrade inject, run, runpip.
Run uvenv without any arguments to see all possible subcommands.
You can snapshot your current setup into a uvenv.lock file using:
uvenv freeze
This lock file records all installed applications along with their metadata — including version, Python version, and any injected dependencies.
Later, you can restore that exact setup using:
uvenv thaw
This is useful for replicating the same setup on a different machine, or after a clean install or system update.
The uvenv.lock file can be saved in one of the following formats:
jq)Choose the format using the --format flag:
uvenv freeze --format json
See docs/lockfile_v1.md for details on the file format, including all supported options and examples.
Use --include or --exclude to control which apps get recorded or restored:
uvenv freeze --exclude some-app
uvenv thaw --include only-this-app
For all available options, see:
uvenv freeze --help
uvenv thaw --help
uvx and Comparing with uv tooluvxThe tool previously named uvx is now uvenv due to a naming collision with a new uv command. The new name better reflects its purpose, combining uv with venv.
You can run uvenv self migrate to move your environments and installed commands from uvx to uvenv.
uvenv differs from uv toolWhile both uvenv and uv tool (a subcommand of uv) offer overlapping functionality for installing and running Python applications, they differ in purpose and approach:
uvenv is modeled after pipx, offering commands like install, inject, run, upgrade, and runpip. If you're already used to pipx, uvenv is a near drop-in replacement.uvenv supports pipx's inject functionality, which lets you add extra packages to an app’s environment — helpful for plugins, linters, or testing tools. uv tool does not currently support this.uvenv uses uv for dependency resolution and installation, benefiting from its speed and correctness. It also respects uv's configuration files (such as ~/.config/uv/uv.toml and /etc/uv/uv.toml, see uv config docs) unless the environment variable UV_NO_CONFIG=1 is set to ignore them.In short:
uvenv if you want pipx-style workflows with advanced management features.uv tool if you prefer a minimal approach for running tools quickly - for most basic use-cases, uv tool is probably sufficient.uvenv leverages Rust for improved performance
and compatibility with uv.uvx 1.x, which is written in pure
Python.
Find it at robinvandernoord/uvx.curl https://sh.rustup.rs -sSf | sh
uvenv repo and navigate to it:
git clone https://github.com/robinvandernoord/uvenv.git
cd uvenv
python -m venv venv # or `uv venv venv --seed`
source venv/bin/activate
pip install maturin # or `uv pip install maturin`
uvenv binary:
maturin develop
uvenv:
./venv/bin/uvenv
For additional details on building and distribution, refer to maturin documentation.
uvenv is distributed under the terms of the MIT license.
See CHANGELOG.md on GitHub
FAQs
uvenv: pipx for uv (🦀)
We found that uvenv demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.

Security News
Socket CEO Feross Aboukhadijeh joins Insecure Agents to discuss CVE remediation and why supply chain attacks require a different security approach.

Security News
Tailwind Labs laid off 75% of its engineering team after revenue dropped 80%, as LLMs redirect traffic away from documentation where developers discover paid products.