I can run `uvx sometool` without fear because I know that it'll take a few secon...

quectophoton · 2025-12-26T22:26:02 1766787962

I wouldn't say without fear, since you're one typo away from executing a typo-squatted malicious package.

I do use it on CI/CD pipelines, but I wouldn't dare type uvx commands myself on a daily basis.

stavros · 2025-12-26T22:45:53 1766789153

uvx isn't more risky than `pip install`, which is what I used before.

pnt12 · 2025-12-27T09:00:30 1766826030

But with pip you only need to be careful on install - with uvx you need to be careful forever.

I'm a big fan of uv, but don't like that part of uvx.

(makes me wonder if a small wrapper can do this - safe uvx, or suvx for short)

stavros · 2025-12-27T10:16:24 1766830584

I generally tend to let the shell autocomplete, so I don't type it out every time, but I see your point. If I use a program more than once or twice, I install it.