Alternatives

Alternatives to uv

5 Package & Toolchain Managers rivals, ranked by the same evidence-graded leaderboard — uv itself ranks #4 with a PA Score of 27/100. Every “beats uv on” below comes from a judged head-to-head round with cited evidence — see the methodology.

#1
mise
Jeff Dickey (jdx) and contributors
PA Score 31/100vs uv →
coverage
36.2/100
Beats uv on: Turn on protections against malicious packages, such as blocking lifecycle scripts or enforcing a minimum release age · Trust that fetched packages are verified against checksums, signatures, or attestations before they run
#2
Bun (package manager)
Oven (Oven-sh, Inc.)
PA Score 29/100vs uv →
coverage
48.5/100
Beats uv on: Audit installed dependencies for known vulnerabilities directly from the CLI · Enforce a frozen/immutable lockfile mode that fails the install when the manifest and lockfile disagree
#3
Homebrew
Homebrew maintainers
PA Score 28/100vs uv →
coverage
30.1/100
Beats uv on: Opt out of telemetry and usage tracking · Export all of my data in open formats and leave
#5
pnpm
pnpm maintainers (Zoltan Kochan et al.)
PA Score 26/100vs uv →
coverage
50.5/100
Beats uv on: Audit installed dependencies for known vulnerabilities directly from the CLI · Enforce a frozen/immutable lockfile mode that fails the install when the manifest and lockfile disagree
#6
Nix
NixOS Foundation
PA Score 23/100vs uv →
coverage
27.7/100
Beats uv on: Install prebuilt binary packages from a cache instead of compiling from source · Install almost anything I need from a large, actively maintained package registry or repository

Full leaderboard: Package & Toolchain Managers arena →