oven-sh/bun
View on GitHub ↗ ★ 96,514 Rust
Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one
268 mentions on Hacker News by 204 people: 39 stories, 229 comments · first 2022-07-12 · latest 2026-10-24
20082026
-
…actually just looking this up, it appears claude-code itself was just added to that whitelist : D https://github.com/oven-sh/bun/commit/5c59842f78880a8b5d9c2e...
comment by JamesSwift · 2026-04-01 · in The Claude Code Source Leak: fake tools, frustration regexes, undercover mode -
It was not cause by this. https://github.com/oven-sh/bun/issues/28001#issuecomment-416...
comment by chalmovsky · 2026-03-31 · in Claude Code's source code has been leaked via a map file in their NPM registry -
…ultimately caused by a Bun bug which I reported, which means source maps are exposed in production: https://github.com/oven-sh/bun/issues/28001 Claude code uses (and Anthropic owns) Bun, so my guess is they're doing a production build,…
comment by jakegmaths · 2026-03-31 · in Claude Code's source code has been leaked via a map file in their NPM registry -
https://github.com/oven-sh/bun/issues?q=is%3Aissue%20state%3... Setting aside the fact that the S3 built-in API is now neglected, I'm skeptical about the runtime providing such APIs. As Ruby on Rails does well, these are issues that should…
comment by hajime-san · 2026-03-22 · in 404 Deno CEO not found -
https://github.com/oven-sh/bun/issues/18192 I am talking about this bug. It looks like it is still unfixed, in the sense, there is a PR fixing it, but it wasn't merged. LOL. Regardless of whether this specific bug would be caught by Rust…
comment by koakuma-chan · 2026-03-20 · in Java is fast, code might not be -
Wow, I thought you were exaggerating, but no: https://github.com/oven-sh/bun/issues?q=is%3Aissue%20state%3... Open 80, closed 492.
comment by _flux · 2026-03-17 · in Node.js needs a virtual file system -
This looks promising. And it's exciting to think it could also target mobile [1]. [1]: https://github.com/oven-sh/bun/issues/21237
comment by sumolessons · 2026-02-19 · in Electrobun v1: Build fast, tiny, and cross-platform desktop apps with TypeScript -
…read the source yourself [1]. If Bun is "just a wrapper", then surely Node.js and Deno are too? [1] https://github.com/oven-sh/bun/tree/main/src
comment by dtf · 2026-02-14 · in Zig – io_uring and Grand Central Dispatch std.Io implementations landed -
Is it mature? I’m genuinely curious because there’s currently 63 open issues of reported segfaults. https://github.com/oven-sh/bun/issues?q=is%3Aissue%20state%3...
comment by tiffanyh · 2026-02-09 · in Bun v1.3.9 -
…library)... I skimmed the issues but I couldn't find any issues on Bun regarding this except for: https://github.com/oven-sh/bun/discussions/4325
comment by kretaceous · 2025-12-06 · in The missing standard library for multithreading in JavaScript -
I think they're referring to bundling Bun into another program to use Bun as a JS runtime: https://github.com/oven-sh/bun/issues/12017
comment by Defletter · 2025-12-04 · in Show HN: Fresh – A new terminal editor built in Rust -
…an added dose of segfaults. 1. https://github.com/denoland/deno/issues?q=is%3Aissue%20state... 2. https://github.com/oven-sh/bun/issues?q=is%3Aissue%20state%3... Node.js is a no-brainer for anyone shipping a TS/JS backend. I'd rather deal…
comment by kamikazechaser · 2025-12-03 · in Anthropic acquires Bun -
…work preferred Highlights - Open Source contributor ( Some of top open source contributions - https://github.com/oven-sh/bun/pull/17207 and https://github.com/CapSoftware/scap ) - Currently building a multipurpose ( SQL and QueryDSL )…
comment by Pranav2612000 · 2025-12-03 · in Ask HN: Who wants to be hired? (December 2025) -
…you are def very busy right now with the acquisition, but wanted to give my PR the best shot: https://github.com/oven-sh/bun/pull/24514
comment by franciscop · 2025-12-03 · in Anthropic acquires Bun -
…code, here are a few examples: - this hand-rolled JS parser of 24k dense, memory-unsafe lines: https://github.com/oven-sh/bun/blob/c42539b0bf5c067e3d085646... (this is a version from quite a while ago to exclude LLM impact) - hand-rolled…
comment by dgroshev · 2025-12-03 · in Anthropic acquires Bun -
…that make it hard for us to use. I've forgotten why now, but this in particular bit us in the ass: https://github.com/oven-sh/bun/issues/6608 . We use PNPM and are very happy with it, even if it's not as fast as Bun's package manager.…
comment by kabirgoel · 2025-12-02 · in Anthropic acquires Bun -
…that first comment too. To clarify: 1. User krig reports an issue against the Bun repo: https://github.com/oven-sh/bun/issues/24548 2. Bun's own automated "bunbot" filed a PR with a potential fix: https://github.com/oven-sh/bun/pull/24578…
comment by simonw · 2025-12-02 · in Anthropic acquires Bun -
…arbitrary code execution bug I reported that the Bun Claude bot created a PR for about 3 weeks ago: https://github.com/oven-sh/bun/pull/24578 So far, someone from the bun team has left a bunch of comments like > Poor quality code ...and…
comment by krig · 2025-12-02 · in Anthropic acquires Bun -
…to dig deep into the bun runtime (it's in zig) to see how this remains efficient. it's a heap: https://github.com/oven-sh/bun/blob/509a97a43516fe4f6d4ff400... of these: https://github.com/oven-sh/bun/blob/509a97a43516fe4f6d4ff400... pretty…
comment by a-dub · 2025-11-17 · in Show HN: PrinceJS – 19,200 req/s Bun framework in 2.8 kB (built by a 13yo) -
> https://github.com/oven-sh/bun/issues?q=segfault%20OR%20segm... It should be noted that most of those issues are created by opening a link that bun creates when it crashes, they are not yet reviewed/confirmed and most likely a lot of…
comment by nvlled · 2025-11-17 · in Open-source Zig book -
…sufficiently complex. [1]: https://security.googleblog.com/2025/11/rust-in-android-move... [2]: https://github.com/oven-sh/bun/issues?q=segfault%20OR%20segm...
comment by ViewTrick1002 · 2025-11-17 · in Open-source Zig book -
…I have a hard time squaring the statement that Zig makes it "easy" to build memory safe programs. https://github.com/oven-sh/bun/issues?q=segfault%20OR%20segm...
comment by ViewTrick1002 · 2025-11-17 · in Open-source Zig book -
…as deno - deno 44: https://github.com/denoland/deno/issues?q=is%3Aissue%20state... - bun 464: https://github.com/oven-sh/bun/issues?q=is%3Aissue%20state%3...
comment by williamstein · 2025-11-11 · in Zig and the design choices within -
…in Zig that are presumably quite exploitable. Unclear what to draw from this, though. [1]: https://github.com/oven-sh/bun/issues?q=is%3Aissue%20state%3...
comment by dadrian · 2025-09-23 · in Zig feels more practical than Rust for real-world CLI tools -
…discussions here on HN and the number of segfault issues in the Bun repo there is a core of truth. https://github.com/oven-sh/bun/issues?q=Segfault
comment by ViewTrick1002 · 2025-09-20 · in Is Zig's new writer unsafe? -
https://github.com/oven-sh/bun/issues/22679 There's an open discussion about adding something similar to bun as well^ minimumReleaseAge doesn't seem to be a bulletproof solution so there's still some research/testing to be done in this area
comment by h4ch1 · 2025-09-18 · in Pnpm has a new setting to stave off supply chain attacks -
bun is also working on it: https://github.com/oven-sh/bun/issues/22679
comment by thepill · 2025-09-16 · in Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised -
https://github.com/oven-sh/bun/releases/expanded_assets/bun-... progress: dynamically-linked musl binaries (tnx) next: statically-linked musl binaries
comment by 1vuio0pswjnm7 · 2025-09-12 · in Behind the scenes of Bun Install -
Here is the code: https://github.com/oven-sh/bun/blob/7d5f5ad7728b4ede521906a4... We trust the self-reported size by gzip up to 64 MB, try to allocate enough space for all the output, then run it through libdeflate. This is instead of a…
comment by Jarred · 2025-09-12 · in Behind the scenes of Bun Install -
…saw this comment and fixed your bun issue? Or maybe it just deleted code in a random manner idk. https://github.com/oven-sh/bun/commit/b474e3a1f63972979845a6...
comment by hoten · 2025-09-11 · in Behind the scenes of Bun Install -
…of code before hitting a deal breaker. Last big issue I had with Bun was streams closing early: https://github.com/oven-sh/bun/issues/16037 Last big issue I had with Deno was a memory leak: https://github.com/denoland/deno/issues/24674 At…
comment by dsissitka · 2025-09-11 · in Behind the scenes of Bun Install -
…you can do the same thing to autocomplete arguments? Bun still hasn't figured out how to do that ( https://github.com/oven-sh/bun/issues/6037 ), even though they can all but copy NPM's (already written) completions. I really liked using…
comment by hungryhobbit · 2025-08-17 · in Node.js is able to execute TypeScript files without additional configuration -
…very much not memory safe. Which a cursory search for ”segfault” in the Bun repo quickly tells you. https://github.com/oven-sh/bun/issues?q=is%3Aissue%20state%3...
comment by ViewTrick1002 · 2025-08-12 · in Undefined Behavior in C and C++ (2024) -
…manually: curl -fsSL https://bun.sh/install | bash (Appears to have been triggered by a 503 for https://github.com/oven-sh/bun/releases/download/bun-v1.2.20... )
comment by mik3y · 2025-08-11 -
…behavior? I would say that a cursory search on ”segfault” in the Bun repo tells a different story. https://github.com/oven-sh/bun/issues?q=is%3Aissue%20state%3...
comment by ViewTrick1002 · 2025-08-10 · in Partially Matching Zig Enums -
…500 npm packages with lifecycle scripts, however none of the affected packages are on that list: https://github.com/oven-sh/bun/blob/main/src/install/default... ). Switching to a secure-by-default package manager, I think, is something…
comment by nateb2022 · 2025-07-23 · in Prettier NPM Packages Compromised in Supply Chain Attack -
…issues and making it easier to manage dependencies. From the last issue linked in the PR ( https://github.com/oven-sh/bun/issues/1760 )
comment by carlosneves · 2025-07-19 · in Bun adds pnpm-style isolated installation mode -
…code (Zig) inside bun itself and just exposed to developers as a JavaScript API. Source code: https://github.com/oven-sh/bun/tree/6ebad50543bf2c4107d4b4c2...
comment by oakesm9 · 2025-06-11 · in Show HN: S3mini – Tiny and fast S3-compatible client, no-deps, edge-ready -
If you want to play with this, Bun 1.0.23+ seems to already have support: https://github.com/oven-sh/bun/discussions/4325
comment by mst · 2025-05-17 · in JavaScript's New Superpower: Explicit Resource Management -
…but i picked the first zig project that came to mind, bun, and it is riddled with segfaults https://github.com/oven-sh/bun/issues?q=is%3Aissue%20state%3...
comment by kobebrookskC3 · 2025-04-28 · in Ask HN: Memory-safe low level languages? -
…also compat the other way - there are the beginnings of node/browser polyfills for Bun-only APIs: https://github.com/oven-sh/bun/tree/main/packages/bun-polyfi...
comment by porridgeraisin · 2025-03-24 · in Move on to ESM-Only -
Seriously? Bun has over 500 open issues with the label "crash". https://github.com/oven-sh/bun/issues?q=is%3Aissue%20state%3... The socket implementation is broken too https://github.com/oven-sh/bun/issues/5627
comment by scresswell · 2025-02-17 · in Ask HN: Riding the Roller Coaster of Development Tooling -
might have been a problem in Bun that was fixed by: https://github.com/oven-sh/bun/pull/16747
comment by leeoniya · 2025-01-25 · in Wild – A fast linker for Linux -
…If you've had any issues with dgram in 1.2, open an issue in our repo and I'll take a look :) [0] https://github.com/oven-sh/bun/issues/10381
comment by heimskr · 2025-01-23 · in Bun 1.2 Is Released -
Maybe it depends on the project/dependencies. Still a lot of open/recent Windows issues: https://github.com/oven-sh/bun/issues?q=is%3Aissue%20state%3...
comment by XCSme · 2025-01-23 · in Bun 1.2 Is Released -
looks like it's planned: https://github.com/oven-sh/bun/pulls?q=is%3Apr+is%3Aopen+mus...
comment by leeoniya · 2025-01-22 · in Bun 1.2 Released with 90% Node.js Compatibility and Built-In S3 Object Support -
…there is also a default list of packages that are allowed to run scripts on download with Bun, FYI https://github.com/oven-sh/bun/blob/main/src/install/default...
comment by diggan · 2025-01-02 · in Developing inside a virtual machine -
…This role will involve lots of open-source low-level systems work, mostly in Bun's GitHub repo - https://github.com/oven-sh/bun and also in a commercial hosting product. Apply here: https://apply.workable.com/oven/j/A7A1388873/ Most of our…
comment by Jarred · 2024-09-03 · in Ask HN: Who is hiring? (September 2024)