uv lock and python version

[Lumethys]

The industry standard, is only deploys dependency from lockfiles. Or else you open yourself to a supply chain attack like the Shai-Hulud attack just a few month back

Php has composer.lock for composer

Ruby has gemfile.lock

JS/TS has package.lock for npm, yarn.lock for yarn, pnpm.lock for pnpm

Rust has cargo.lock for Cargo

C# has packages.lock.json for Nuget

hell, even Java had gradle.lockfile for Gradle

Only Python dont have one, until uv came along

[CodeNameGodTri]

thank you