# uv vs Verdaccio

| Attribute | uv | Verdaccio |
|---|---|---|
| **Vioscale score** | 66.8 (77% (high)) | 67.6 (78% (high)) |
| activity.commits_last_30d | 100 | 36 |
| adoption.dependent_repos | 2 | 4,188 |
| adoption.github_stars | 89,118 | 17,843 |
| adoption.package_downloads_weekly | 44,329,091 | 635,930 |
| deployment.options | `{"self_hosted":true}` | `{"cloud":true,"self_hosted":true}` |
| description.long | A unified command-line tool that consolidates the functionality of multiple Python package management and development utilities into a single interface. It delivers substantially faster dependency resolution and installation compared to traditional package managers. | Verdaccio is an open-source, lightweight registry for managing npm packages locally within an organization. It runs with minimal configuration, proxies remote registries to cache packages locally, and supports private package hosting without requiring external infrastructure. |
| features.capabilities | `{"role":"manager_client","ecosystem":"python","deployment":"cli_local","workspaces":true,"open_source":"oss","pricing_model":"free","package_formats":"multi","lockfile_deterministic":true,"supply_chain_integrity":true}` | `{"role":"private_hosted_registry","ecosystem":"js","deployment":"cli_local","open_source":"oss","pricing_model":"free","upstream_proxy":true,"package_formats":"single","private_packages":true,"vuln_license_scanning":true,"lockfile_deterministic":true,"supply_chain_integrity":true}` |
| integrations.count | 17 | 14 |
| integrations.list | `[{"name":"Docker"},{"name":"GitHub Actions"},{"name":"GitLab CI/CD"},{"name":"AWS Lambda"},{"name":"Azure Artifacts"},{"name":"AWS CodeArtifact"},{"name":"JFrog Artifactory"},{"name":"PyTorch"},{"name":"FastAPI"},{"name":"Jupyter"}]` | `[{"name":"npm"},{"name":"yarn"},{"name":"pnpm"},{"name":"Docker"},{"name":"Kubernetes"},{"name":"Helm"},{"name":"Amazon S3"},{"name":"Google Cloud Storage"},{"name":"Snyk"},{"name":"Ansible"},{"name":"nx"},{"name":"create-react-app"},{"name":"Angular CLI"},{"name":"Storybook"}]` |
| language.primary | Rust | TypeScript |
| license.spdx | Apache-2.0 | MIT |
| platform.support | `{"cli":true,"mac":true,"linux":true,"windows":true}` | `{"cli":true,"mac":true,"linux":true,"windows":true}` |
| pricing | `{"type":"open_source","freeTier":true,"sourceUrl":"https://docs.astral.sh/uv","retrievedAt":"2026-08-14T09:24:16.660Z"}` | `{"type":"free","summary":"Free and open source; optional donations accepted starting from $1/month","freeTier":true,"sourceUrl":"https://verdaccio.org","retrievedAt":"2026-08-14T11:02:54.943Z"}` |
| pricing.free_tier | yes | yes |
| pricing.model | commercial | free |
| pricing.price_level | free | free |
| pricing.transparent | - | yes |
| release.cadence_days | 3 | 4 |
| release.history | `[{"url":"https://github.com/astral-sh/uv/releases/tag/0.12.6","date":"2026-08-25T19:41:07Z","type":"stable","version":"0.12.6"},{"url":"https://github.com/astral-sh/uv/releases/tag/0.12.5","date":"2026-08-14T19:57:52Z","type":"stable","version":"0.12.5"},{"url":"https://github.com/astral-sh/uv/releases/tag/0.12.4","date":"2026-08-13T21:16:08Z","type":"stable","version":"0.12.4"},{"url":"https://github.com/astral-sh/uv/releases/tag/0.12.3","date":"2026-08-07T16:34:42Z","type":"stable","version":"0.12.3"},{"url":"https://github.com/astral-sh/uv/releases/tag/0.12.2","date":"2026-08-05T19:22:56Z","type":"stable","version":"0.12.2"},{"url":"https://github.com/astral-sh/uv/releases/tag/0.12.1","date":"2026-07-31T19:43:31Z","type":"stable","version":"0.12.1"},{"url":"https://github.com/astral-sh/uv/releases/tag/0.12.0","date":"2026-07-28T18:58:12Z","type":"stable","version":"0.12.0"},{"url":"https://github.com/astral-sh/uv/releases/tag/0.11.33","date":"2026-07-28T10:37:25Z","type":"stable","version":"0.11.33"},{"url":"https://github.com/astral-sh/uv/releases/tag/0.11.32","date":"2026-07-23T23:17:45Z","type":"stable","version":"0.11.32"},{"url":"https://github.com/astral-sh/uv/releases/tag/0.11.31","date":"2026-07-22T01:49:40Z","type":"stable","version":"0.11.31"},{"url":"https://github.com/astral-sh/uv/releases/tag/0.11.30","date":"2026-07-20T20:48:06Z","type":"stable","version":"0.11.30"},{"url":"https://github.com/astral-sh/uv/releases/tag/0.11.29","date":"2026-07-15T18:44:43Z","type":"stable","version":"0.11.29"},{"url":"https://github.com/astral-sh/uv/releases/tag/0.11.28","date":"2026-07-07T23:14:13Z","type":"stable","version":"0.11.28"},{"url":"https://github.com/astral-sh/uv/releases/tag/0.11.27","date":"2026-07-06T21:01:23Z","type":"stable","version":"0.11.27"},{"url":"https://github.com/astral-sh/uv/releases/tag/0.11.26","date":"2026-06-30T14:53:17Z","type":"stable","version":"0.11.26"},{"url":"https://github.com/astral-sh/uv/releases/tag/0.11.25","date":"2026-06-27T00:49:49Z","type":"stable","version":"0.11.25"},{"url":"https://github.com/astral-sh/uv/releases/tag/0.11.24","date":"2026-06-23T21:16:31Z","type":"stable","version":"0.11.24"},{"url":"https://github.com/astral-sh/uv/releases/tag/0.11.23","date":"2026-06-19T18:42:52Z","type":"stable","version":"0.11.23"},{"url":"https://github.com/astral-sh/uv/releases/tag/0.11.22","date":"2026-06-18T23:05:10Z","type":"stable","version":"0.11.22"},{"url":"https://github.com/astral-sh/uv/releases/tag/0.11.21","date":"2026-06-11T18:20:26Z","type":"stable","version":"0.11.21"}]` | `[{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v7.0.0-next-7.24","date":"2026-08-18T16:52:43Z","type":"prerelease","version":"v7.0.0-next-7.24"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.10.0","date":"2026-08-18T06:06:54Z","type":"stable","version":"v6.10.0"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.9.3","date":"2026-08-17T21:52:20Z","type":"stable","version":"v6.9.3"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.9.2","date":"2026-08-02T17:52:15Z","type":"stable","version":"v6.9.2"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.9.1","date":"2026-08-02T08:26:30Z","type":"stable","version":"v6.9.1"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.9.0","date":"2026-07-26T20:05:02Z","type":"stable","version":"v6.9.0"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.8.0","date":"2026-07-13T20:50:22Z","type":"stable","version":"v6.8.0"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v7.0.0-next-7.23","date":"2026-07-11T12:39:21Z","type":"prerelease","version":"v7.0.0-next-7.23"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.7.4","date":"2026-06-21T08:01:04Z","type":"stable","version":"v6.7.4"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.7.3","date":"2026-06-21T06:24:30Z","type":"stable","version":"v6.7.3"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v7.0.0-next-7.22","date":"2026-06-20T17:56:52Z","type":"prerelease","version":"v7.0.0-next-7.22"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v7.0.0-next-7.21","date":"2026-06-11T20:52:43Z","type":"prerelease","version":"v7.0.0-next-7.21"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.7.2","date":"2026-05-25T12:56:55Z","type":"stable","version":"v6.7.2"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.7.1","date":"2026-05-16T15:02:40Z","type":"stable","version":"v6.7.1"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.7.0","date":"2026-05-16T14:32:24Z","type":"stable","version":"v6.7.0"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.6.2","date":"2026-05-14T18:23:18Z","type":"stable","version":"v6.6.2"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.6.0","date":"2026-05-10T13:22:10Z","type":"stable","version":"v6.6.0"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.5.2","date":"2026-04-19T10:30:14Z","type":"stable","version":"v6.5.2"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.5.1","date":"2026-04-16T20:18:01Z","type":"stable","version":"v6.5.1"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.5.0","date":"2026-04-11T09:58:32Z","type":"stable","version":"v6.5.0"}]` |
| security.disclosure_policy | - | yes |
| security.scorecard | - | 6.9 |
| security.vulnerabilities | `{"count":5,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=pypi&package_name=uv&per_page=100","last_12m":4,"max_severity":"MODERATE"}` | `{"count":1,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=npm&package_name=verdaccio&per_page=100","last_12m":0,"max_severity":"MODERATE"}` |

## Capabilities (Package Registries)

| Capability | uv | Verdaccio |
|---|:--:|:--:|
| **Core** |  |  |
| Role | Package manager client | Private hosted registry |
| **Ecosystem** |  |  |
| Ecosystem / language | Python | JavaScript |
| **Deployment** |  |  |
| Deployment | CLI-local | CLI-local |
| **Formats** |  |  |
| Package formats supported | Many formats | Single ecosystem |
| **Hosting** |  |  |
| Private / scoped packages | - | ✓ |
| Upstream proxy / caching | - | ✓ |
| **Resolution** |  |  |
| Lockfile / deterministic installs | ✓ | ✓ |
| Workspaces / monorepo | ✓ | - |
| Content-addressable store | - | - |
| **Supply chain** |  |  |
| Supply-chain integrity | ✓ | ✓ |
| Vulnerability / licence scanning | - | ✓ |
| **Licensing** |  |  |
| Openness | Open-source | Open-source |
| **Pricing** |  |  |
| Pricing model | Free / OSS | Free / OSS |

*Source: Vioscale. Generated 2026-09-01T16:16:43.254Z. "-" = undocumented, not absent.*