Astral announced tar-codec, a fast and secure tar parser for Rust that uv now uses starting from version 0.13.1. The new parser is roughly twice as fast as their previous implementation (astral-tokio-tar) and reduces uv's exposure to parser differentials and security risks.
Background
uv is a fast Python package manager written in Rust by Astral, increasingly popular as an alternative to pip and other packaging tools. Tar archives are the standard format for Python source distributions (sdists) on PyPI.
- Source
- Lobsters
- Published
- Oct 28, 2026 at 12:59 AM
- Score
- 6.0 / 10