The 3 UV Settings That Block Supply Chain Attacks

Why watch

This tutorial demonstrates three uv package manager security settings to protect Python and JavaScript projects from supply chain attacks targeting PyPI and NPM. Viewers learn how to pin exact dependency versions, exclude packages newer than 7 days to avoid newly published malicious packages, and enforce locked sync behavior in CI/CD pipelines. The video also covers securing AI coding agents like Claude Code to prevent automatic installation of compromised packages.