python-monorepo — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited python-monorepo (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Modern Python monorepo architecture using uv for workspace management and mise for Python version and task orchestration.
Monorepo: Single repository containing multiple related packages and applications
uv workspace: Python's answer to npm/pnpm workspaces
my-monorepo/
├── .mise.toml # Python version + task runner
├── pyproject.toml # Root workspace config
├── uv.lock # Unified lock file
├── apps/ # Deployable applications
│ ├── api/
│ └── worker/
└── packages/ # Shared libraries
├── core/
└── utils/Root pyproject.toml:
[project]
name = "my-monorepo"
version = "0.1.0"
requires-python = ">=3.12"
[tool.uv.workspace]
members = ["apps/*", "packages/*"]
[tool.uv]
dev-dependencies = [
"pytest>=8.0.0",
"ruff>=0.8.0",
"basedpyright>=1.0.0",
]See references/workspace-config.md for detailed configurations.
Workspace packages reference each other by distribution name:
packages/utils/pyproject.toml:
[project]
name = "my-utils"
dependencies = ["my-core"]apps/api/pyproject.toml:
[project]
name = "my-api"
dependencies = ["my-core", "my-utils", "fastapi>=0.100.0"]packages/core/src/my_core/entities.py:
class User:
def __init__(self, email: str):
self.email = emailapps/api/src/my_api/main.py:
from my_core.entities import User # Import from workspace package
def run():
# App code...apps/ → packages/ (Apps depend on packages)
packages/ ⇏ apps/ (Never the reverse)Rules:
.mise.toml:
[tools]
python = "3.12"
[tasks.check]
depends = ["lint", "typecheck", "test"]
[tasks.lint]
run = "uv run ruff check ."Usage: mise run check
uv sync # Install all packages
uv add fastapi --package my-api # Add to specific package
uv add my-core --package my-api # Add workspace package
uv run pytest # Run tests
uv lock --upgrade # Update dependenciesFor detailed patterns:
references/workspace-config.md - pyproject.toml patterns, dependencies, versionsreferences/docker.md - Multi-stage Docker buildsreferences/namespace-packages.md - PEP 420 namespace packages~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.