Out of 366 trusted dependencies analyzed in Bun's src/install/default-trusted-dependencies.txt, 96 packages (26.2%) have lifecycle scripts that are NOT useful for using the library.
These packages fall into the following categories:
robobun robobun
robobun
/ gist-content.md
Created
November 1, 2025 11:00
Analysis of Non-Useful Lifecycle Scripts in Bun Trusted Dependencies
robobun
/ ubsan-reproduction.md
Created
October 27, 2025 07:09
UBSAN Error in Bun CPU Profiler - JSC SamplingProfiler Null Pointer Issue
When using --cpu-prof flag in Bun, we get a UBSAN (Undefined Behavior Sanitizer) error from JSC's SamplingProfiler:
/workspace/bun/build/debug/cache/webkit-6d0f3aac0b817cc0/include/JavaScriptCore/HeapCellInlines.h:35:30: runtime error: member call on null pointer of type 'const JSC::HeapCell *'
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /workspace/bun/build/debug/cache/webkit-6d0f3aac0b817cc0/include/JavaScriptCore/HeapCellInlines.h:35:30
robobun
/ api-vs-cli-comparison.md
Created
October 21, 2025 19:08
Bun.build() API sourcemap bug: compile option ignores sourcemap parameter (2025-10-21)
CRITICAL BUG FOUND: The Bun.build() API with compile option does NOT properly apply sourcemaps, even when sourcemap: "inline" is specified. The CLI bun build --compile --sourcemap works correctly.
robobun
/ sourcemap-findings.md
Last active
October 21, 2025 19:08
Bun build --compile --sourcemap investigation findings (2025-10-21)