uv-secure is now on conda-forge. If you're a conda fan too, I suggest installing as a @prefix.dev pixi global tool.

I'd like to expand the scope of uv-secure to scan pixi.lock files too... unfortunately @conda-forge.org has no API for listing known package vulnerabilities like PyPi that I know of.