This is the macOS arm64 binary for Bun, a fast all-in-one JavaScript runtime.
88%
Total Score
healthy
608 releases and 273 in the last year show an actively maintained platform binary.
No build attestation or trusted-publisher provenance was recorded, leaving a supply-chain transparency gap despite the package's strong repository activity.
The repository name and README do not mention this exact package, which is a transparency caution; however, the linked oven-sh/bun repository is a plausible monorepo for a Bun platform binary.
All but one workflow use read-only permissions and all 64 analyzed action references are pinned; the audit found only low-confidence cache-poisoning hygiene and trusted-publishing findings, with no untrusted checkout or script-injection path.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.