Socket’s Bun Security Scanner is a plug‑in for the Bun JavaScript runtime that automatically scans packages during `bun install`. It checks for malware, typosquatting and other supply‑chain threats by calling Socket’s security API, works in both authenticated (with a Socket API key) and free modes, and is aimed at developers who want real‑time protection for their Bun projects.
Total donated
Undistributed
Share with your subscribers:
Recipients
How the donated funds are distributed
Support the dependencies of socketdev/bun-security-scanner
Helper functions for V8 coverage files.
Browser compatibility data provided by MDN Web Docs
Model Context Protocol implementation for TypeScript - Client package
Playwright Tools for MCP
Audit React shadcn apps for missing UI fundamentals.
Json Schema Type Builder with Static Type Resolution for TypeScript
Socket.dev optimized package override for packageurl-js
Core utilities and infrastructure for Socket.dev security tools
SDK for the Socket API client
TypeScript definitions for mdast
TypeScript definitions for node
TypeScript definitions for semver
TypeScript definitions for shell-quote
Rust WASM build of @ultrathink/acorn
V8 coverage provider for Vitest
UI for Vitest
AST-aware v8-to-istanbul
JSON Schema validator that compiles to plain JavaScript, still runs where code generation is blocked, and can be compiled away at build time. Passes the full official test suite.
Type definitions and documentation for Bun, an incredibly fast JavaScript runtime
output coverage reports using Node.js' built in coverage
Codebase intelligence for TypeScript and JavaScript: health, complexity, duplication, architecture, styling drift, and unused code from one graph. CLI, LSP, and MCP server. Zero config for over 100 fr
Property based testing framework for JavaScript (like QuickCheck)
Modify strings, generate sourcemaps
A fast, flexible, configuration-based command-line interface for linting Markdown/CommonMark files with the `markdownlint` library
Zero-runtime, compile-time typed tool calls derived from a live server's tools/list
Zero-dependency, isomorphic HTML sanitizer: a fast browser-faithful WHATWG engine (deny-by-default) plus a drop-in sanitize-html-compatible legacy engine.
HTTP server mocking and expectations library for Node.js
Formatter for the JavaScript Oxidation Compiler
Linter for the JavaScript Oxidation Compiler
High-performance type-aware TypeScript linter powered by typescript-go, for use with oxlint.
HTML parser and serializer.
A high-level API to automate web browsers
Replace port numbers with stable, named .localhost URLs. For humans and agents.
Fast JavaScript/TypeScript bundler in Rust with Rollup-compatible API.
A Rolldown plugin to generate and bundle dts files.
Run GitHub Actions locally — pause on failure, retry in place, and keep caches on your machine.
The semantic version parser used by npm.
quote and parse shell commands
SVGO is a Node.js library and command-line application for optimizing vector images.
Support the repos that depend on this repository
Top contributors
jdalton
261 contributions
![socket-release-bot[bot]'s profile](https://avatars.githubusercontent.com/socket-release-bot[bot])
socket-release-bot[bot]
1 contributions
Recent events
Kivach works on the Obyte network, and therefore you can track all donations.
No events yet
