This is the macOS arm64 binary for Bun, a fast all-in-one JavaScript runtime.
91%
Total Score
healthy
Frequent releases and active organization-backed development outweigh minor workflow and package-identity concerns.
The repository name does not match this package and its README does not mention the package, so the package-to-repository relationship is less explicit; the package's own README identifies it as an alias, which partly explains the mismatch.
The audit found no untrusted checkout or script-injection paths and all 64 action references are pinned, but it flagged high-severity/low-confidence cache-poisoning hygiene and trusted-publishing findings; one workflow also has top-level write permissions.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.