Add uv-secure (#327)

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>

Author: Avasam

.github/workflows/lint-and-build.yml

@@ -61,6 +61,18 @@ jobs:
           version: PATH
           working-directory: src/
           python-version: ${{ matrix.python-version }}
+
+  uv-secure:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+          cache-dependency-glob: "uv.lock"
+      - run: uvx --with uvloop uv-secure
+
   Build:
     runs-on: ${{ matrix.os }}
     strategy:

.pre-commit-config.yaml

@@ -0,0 +1 @@
+repos: [] # TODO: Remove this file once pre-commit.ci is disabled

pyproject.toml

@@ -53,6 +53,9 @@ dev = [
   "mypy[faster-cache] >=1.16",
   "pyright[nodejs] >=1.1.400", # reportPrivateImportUsage behaviour change
   "ruff >=0.11.13",
+  "uv-secure",
+  "uvloop; sys_platform != 'win32'",
+  "winloop; sys_platform == 'win32'",
   #
   # Types
   "scipy-stubs >=1.14.1.1",
@@ -78,6 +81,9 @@ dependency-metadata = [
 [tool.uv.sources]
 keyboard = { git = "https://github.com/boppreh/keyboard.git" } # Fix install on macos and linux-ci https://github.com/boppreh/keyboard/pull/568
 
+[tool.uv-secure.maintainability_criteria]
+forbid_yanked = true
+
 # https://github.com/microsoft/pyright/blob/main/docs/configuration.md#sample-pyprojecttoml-file
 [tool.pyright]
 typeCheckingMode = "strict"