Repo brief: oven-sh/bun

Generated by RepoPilot · document generated 2026-09-15 · concise human review Evidence snapshot · analyzed 2026-09-15T18:19:01.617Z · commit b7b4ddda1beb

Verdict

Healthy — Healthy across all four use cases

• Last commit today
• 7 active contributors
• MIT licensed
• CI configured
• 1 more receipt on the live page

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against dependency CVEs from deps.dev and OpenSSF Scorecard

What it is

Bun is an all-in-one JavaScript/TypeScript runtime, bundler, test runner, and package manager written in Rust and powered by JavaScriptCore. It replaces Node.js, npm, and bundler tooling with a single executable, dramatically reducing startup times and memory usage while supporting TypeScript and JSX out-of-the-box. Monorepo-style workspace structure with Cargo.toml manifests defining multiple Rust crates: src/ast (parser/AST with symbol, scope, transpiler modules), src/api (runtime API layer), src/analytics, src/boringssl_sys (OpenSSL bindings), and language-specific modules (src/base64, src/brotli). TypeScript makes up ~5.7M lines (CLI, tooling) alongside the Rust core runtime.

Start here

Open these first:

• src/bun.js.rs — Main JavaScript runtime entry point that initializes and executes the Bun runtime.
• src/bun_core/lib.rs — Core library providing fundamental abstractions for memory, string handling, and error management across the codebase.
• src/ast/lib.rs — AST (Abstract Syntax Tree) module that handles parsing and representation of JavaScript/TypeScript code.
• src/api/lib.rs — Public API surface that exposes runtime functionality to JavaScript and external consumers.
• src/bun_alloc/lib.rs — Custom memory allocator (Mimalloc-based) that optimizes heap performance for the runtime.

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

git clone https://github.com/oven-sh/bun.git
cd bun
cargo build --release

Note: This is a Rust monorepo; verify the repository's CONTRIBUTING or root Cargo.toml for workspace setup details before running. The README install snippet shows end-user installation (curl, npm, homebrew, Docker) but…

Daily commands:

Evidence insufficient. The README shows how to invoke compiled bun (e.g., bun run index.tsx, bun test, bun install) but does not specify development build/run commands. Verify repository CONTRIBUTING guide or ro…

…shortened for this brief.

Key cautions & unknowns

• Concentrated ownership — top contributor handles 67% of recent commits
• Evidence gaps: No visible Cargo.lock, root Cargo.toml contents, or .env configuration files in provided data—verify dependency versions and build prerequisites before compilation. Likely non-obvious gotchas:…
• Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

• Repository source
• Open issues
• Recent pull requests
• License evidence

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.

---

For the complete agent context, use the CLAUDE.md or Cursor rules export.