Bundlers and build tools
Bun privacy rating
JavaScript runtime, package manager, test runner and bundler in a single executable, built on JavaScriptCore and written in Zig.
Summary
Bun scores 65 out of 100 (grade C) on the bundlers and build tools criteria. It meets 2 of 4 criteria: open source and no ads or data sales. It partly meets no trackers or telemetry. It does not meet independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.
Score 65 out of 100. How scoring works
Criteria
-
Yes
Open source Weight 3 of 3
Is all the source code needed to run the product public?
MIT, with the statically linked JavaScriptCore under LGPL-2.
-
Partial
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
Anonymous crash reports are on by default and can be turned off, and the website uses Plausible analytics.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Free MIT-licensed software backed by Anthropic, with no ads.
-
No
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
No independent audit is published.