Security incidents across open-source aren't showing signs of slowing down
The Bun team is dedicating a higher % of our time to security work for the foreseeable future
@jarredsumner can we add like "bun security" command to check for possible security stuff that crosschecks with CVEs etc? maybe tool for agents without copy pasting this stuff what to check
You need to run nightly OSS model loops on your codebase for blue-team work
The only way to stay secure at this point is to spend more tokens than the attackers...
