Dependencies

uv's Cargo.toml workspace declares ~100 third-party dependencies. The most important ones, grouped by what they enable:

HTTP / network

• reqwest — the HTTP client. Wrapped in uv-client with middleware.
• reqwest-middleware, astral-reqwest-retry — retry / instrumentation middleware.
• tower-http — request middleware primitives.
• http, http-body-util, url — supporting types.

Async runtime

• tokio — async runtime. uv uses the multi-threaded runtime by default.
• tokio-util — extras: codecs, ReaderStream.
• futures — utility combinators.
• async-channel — MPMC channels.

Resolution

• pubgrub (uv's astral fork) — the version-resolution algorithm.
• astral-version-ranges — generic range arithmetic.

Caching

• rkyv — zero-copy archives for cache entries.
• fs-err — error-message-friendly filesystem wrapper.

Text / TOML / JSON

• serde, serde_json, toml, toml_edit — the parsing surface.
• indexmap — order-preserving maps used in lockfiles.
• unicode-bidi, unicode-normalization — text normalization for names.

Compression / archives

• flate2, zstd, bzip2, xz2 — sdist tarball decompression.
• zip, async_zip — wheel handling.

CLI / UX

• clap — argument parsing (the heart of uv-cli).
• indicatif — progress bars.
• anstream, owo-colors — terminal color management.
• tracing, tracing-subscriber, tracing-tree — structured logging.
• miette — diagnostic rendering.

Cryptography / hashing

• sha2, md-5, blake2 — hash algorithms.
• hex, data-encoding — encodings.
• rsa, x509-parser — for OIDC token verification.

Python platform

• mailparse — for METADATA parsing.
• pyproject-toml — typed access to pyproject.toml.
• pep440_rs / pep508_rs — internal forks now living in uv-pep440 / uv-pep508.

Utilities

• anyhow, thiserror — error types.
• itertools, smallvec, compact_str — collection helpers.
• once_cell, parking_lot — synchronization.
• tempfile — temp directories.
• walkdir, globset — filesystem walking.
• uuid, fastrand — IDs.
• mimalloc (gated by uv-performance-memory-allocator) — alternate allocator.

For the full list and exact pinned versions, see the workspace Cargo.toml.