nostr:nprofile1qyt8wumn8ghj7un9d3shjtnyd968gmewwp6kytcqyq007zmz2xx7fz2khuupad9g7tenn33g7uesez795ux0gkjta4srsx5w846 Thanks! From their about:
Scan your uv.lock file for dependencies with known vulnera...
@nprofile1q... Ah, that explains it. We don’t use uv.lock for our libraries either, but we do use it for our applications.
1