# Bun privacy rating

JavaScript runtime, package manager, test runner and bundler in a single executable, built on JavaScriptCore and written in Zig.

## Summary

Bun scores 65 out of 100 (grade C) on the bundlers and build tools criteria. It meets 2 of 4 criteria: open source and no ads or data sales. It partly meets no trackers or telemetry. It does not meet independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

- Website: https://bun.com
- Source code: https://github.com/oven-sh/bun
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Windows, macOS, Linux
- Home page trackers: Cloudflare Web Analytics (cookieless analytics), Plausible (cookieless analytics)
- Category: [Bundlers and build tools](https://privacyratings.com/build-tools/)
- Grade: C (65/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | MIT, with the statically linked JavaScriptCore under LGPL-2. | https://github.com/oven-sh/bun/blob/main/LICENSE.md |
| No trackers or telemetry | Partial | Anonymous crash reports are on by default and can be turned off, and the website uses Plausible analytics. | https://bun.com/docs/runtime/bunfig |
| No ads or data sales | Yes | Free MIT-licensed software backed by Anthropic, with no ads. | https://bun.com/blog/bun-joins-anthropic |
| Independent audit | No | No independent audit is published. |  |

Source: https://privacyratings.com/build-tools/bun/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/build-tools/bun.md