Maintainers

uv is developed by Astral and a wide community of contributors. The project lives at https://github.com/astral-sh/uv.

Top contributors

git shortlog -sne | head -10 from this checkout (commit 4d4f345cfe0309561bbe115e8e3677c502f6a67b):

git shortlog -sne | head -10

uv has had 544 authors contribute over 9,027 commits (Oct 2023 – present).

Where to ask

• Issues: https://github.com/astral-sh/uv/issues — bug reports and feature requests.
• Discussions: https://github.com/astral-sh/uv/discussions — questions.
• Discord: astral.sh/discord — real-time chat.

Reporting security issues

SECURITY.md at the repo root is the canonical contact. Recent advisories:

• GHSA-pjjw-68hj-v9mw (2026-04) — uninstall path traversal via malformed RECORD entries; fixed in 0.9.10.
• See CHANGELOG.md for the full history of security-related fixes.

Governance

uv is an Astral project; design and roadmap decisions are made by Astral with significant community input. Most non-trivial features start as a GitHub issue with a design sketch before any code is written, and benchmark numbers are expected for performance-sensitive changes.

See also

• how-to-contribute.
• CONTRIBUTING.md.