Bun
@bunjavascript
Bun is a fast, all-in-one toolkit for installing, bundling, running and testing JavaScript & TypeScript. To install: `npm i -g bun`
7 Following83.3K Followers4.2K Posts


Bun@bunjavascriptLast week, we published 3 security advisories including Brotli, tls certificates, and quic As future hardening, we will replace most of Bun’s C/C++ dependencies with our own safe Rust implementation. Starting with libarchive252050119K
Bun@bunjavascriptPosts @bunjavascriptWe expect to replace more, excluding WebKit/JavaScriptCore, BoringSSL, and lsquic. There’s still: turbojpeg, libpng, zlib-ng, libdeflate, brotli, zstd, and several more.60813.6K

Bun@bunjavascriptBunRT @steipete: I spent some time on the weekend to test bun's AOT compiler and results are nothing short of amazing. Performance up 2-3x, memory use less than half.Jarred Sumner @jarredsumnerBun AOT also introduces `--trim` which deletes unused parts of Bun from the compiled binary On macOS, a binary that uses Bun.serve’s HTTP server goes from 89 MB to 25 MB0250447
Bun AOT also introduces `--trim` which deletes unused parts of Bun from the compiled binary On macOS, a binary that uses Bun.serve’s HTTP server goes from 89 MB to 25 MB57401.4K102K
Bun@bunjavascriptWe published three security advisories for Bun 1.4.3 and earlier: compromised eMudhra certificates, the brotli decoder bug (HTTP2Shell), and the HTTP/3 "Header Accordions" attack. These are all fixed in Bun 1.4.4. Please upgrade, and rebuild anything made with `bun build --compile` $ bun upgrade194760540.2K
Bun@bunjavascriptBunRT @jarredsumner: Merging Bun AOT next week, then testing on Claude Code Expecting 2-3x less memory + CPU & a slightly smaller binary This is the future of server-side JavaScript Instead of you rewriting in Rust, we rewrote JavaScript's compiler to emit native code ahead of timeJarred Sumner @jarredsumner4th attempt at Bun AOT. Code quality & design is better. Perf is nearly there. Most importantly though It’s just TypeScript. Disregard everything I said last week about `as` casts changing runtime behavior and function arguments throwing. None of that is necessary.0580431
4th attempt at Bun AOT. Code quality & design is better. Perf is nearly there. Most importantly though It’s just TypeScript. Disregard everything I said last week about `as` casts changing runtime behavior and function arguments throwing. None of that is necessary.41380296.2K
Bun@bunjavascriptBunRT @kurtextrem: Bun's now leading the TypeScript checker race! As always, in @framer's monorepo: 🏆 bun check: 2.42s, 2.0 GB | v1.4.4 🥈 tsrs: 2.50s, 2.6 GB | v0.18 🥉 tsc-ts: 5.9s, 5.3 GB | v0.6 TS 7.1 beta: 13.9s, 8.1 GBBun @bunjavascriptBun v1.4.4 - Fixes 271 issues, addressing 544 👍 - `bun fmt` is a fast Prettier-compatible code formatter - `bun check` gets 1.4x - 7.8x faster - New in Bun.SQL & WebSocket - Security fixes, including for Brotli, TLS certs, HTTP/3, and more0120530
Bun@bunjavascriptBun v1.4.4 - Fixes 271 issues, addressing 544 👍 - `bun fmt` is a fast Prettier-compatible code formatter - `bun check` gets 1.4x - 7.8x faster - New in Bun.SQL & WebSocket - Security fixes, including for Brotli, TLS certs, HTTP/3, and more48761.3K91.5K
Bun@bunjavascriptPosts @bunjavascriptWe needed to get this release out tonight , so we couldn't include `bun lint` yet. bun lint is available via `bun upgrade --canary` though20747.2K
Bun@bunjavascriptBun v1.4.4 will be released this evening with a fix for this and for the Brotli issue. Both fetch() and Bun.serve() did not and continue to not enable HTTP/3 by default.John Althouse @4A4133Sorry everyone... We're announcing a 0-Day vuln in QUIC that allows anyone to remotely turn off a server running these libraries. I swear we didn't plan this.16471.3K74.9K
Sorry everyone... We're announcing a 0-Day vuln in QUIC that allows anyone to remotely turn off a server running these libraries. I swear we didn't plan this.764603K487K
Bun@bunjavascriptBunRT @jarredsumner: In the next version of Bun bun check gets 1.7x - 7x faster0260410

Bun@bunjavascriptPosts @bunjavascriptYou can see the complete list of over 1,000 builtin lint rules here11656K
Bun@bunjavascriptPosts @bunjavascriptbun lint builds on top of: - TypeScript’s parser and type checker, ported to Rust - Lint rules ported from oxlint: unicorn, jest, vitest, jsx-a11y, next and promise - Lint rules ported from ESLint, typescript-eslint, eslint-plugin-react, -import and -react-hooks Big thanks to those projects!00313.3K- Show more posts






