My new OSS bun-socket-scanner: A security scanner for @bunjavascript that integrates with http://Socket.dev to detect vulnerabilities during install ⚡️
in Bun v1.2.21, @alistaiir implements security scanner feature. when you configure scanner in bunfig.toml, you can check if the package is safe before installing it!
it reminds me http://socket.dev integration with ni.zsh by @azu_re , so i decided to make a integration for @bunjavascript https://github.com/azu/ni.zsh
need a setup? but it is simple! just run ``` bun add -D bun-socket-scanner ``` and add the `http://install.security` feature in your `bunfig.toml`
it's already on NPM, so you can try it! and give us a feedback!!! https://www.npmjs.com/package/...
oops, here is the github repository!! https://github.com/ryoppippi/b...
also we use all new `Bun.secrets` feature to store http://socket.dev api key. which is really useful too!!
