Open Source·
Deno 2.9 nearly doubled its cold start and learned to read Bun's lockfiles
Deno 2.9 ships a 1.98x faster cold start, a native desktop-app builder, and direct reading of npm, pnpm, yarn, and Bun lockfiles. Here's where Deno sits now.
Product
Bun
RSS 5 articles
First covered May 2, 2026, latest Jun 25, 2026
Open Source·
yt-dlp's maintainer says Bun is now 'fully vibe-coded'. Support is officially deprecated.
yt-dlp's maintainer bashonly says Bun's Rust rewrite 'has taken a turn towards being fully vibe-coded.' The supported window narrowed to four versions.
Open Source·
Bun's million-line Rust rewrite is now mainline. 99.8% of tests pass and 13,000 unsafe blocks remain.
Jarred Sumner merged the Bun-in-Rust PR on May 14, ending Zig as Bun's runtime language. Binary shrinks 3-8 MB; one analysis counted 13,000 unsafe blocks.
Open Source·
Jarred Sumner rewrote 960,000 lines of Bun from Zig to Rust in six days. He might throw it all away.
Bun's creator used Claude to port the JavaScript runtime from Zig to Rust, hitting 99.8% test compatibility. He says there's a 'very high chance' it gets scrapped.
Security·
Mini Shai-Hulud hit PyTorch Lightning. The 11.6M-download PyPI package shipped a credential stealer.
Two malicious lightning releases hit PyPI on April 30. The 42-minute window was enough to ship an RSA-encrypted infostealer to ML developers worldwide.