ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Languages & runtimes · #bun
Goal: Prevent Bun's static file server from serving files outside the intended directory when hosting a web application. Two documented approaches exist: using the `bun serve --public-dir` flag, which relies on Bun's internal path normalization to automatically return a 404 response for any request that attempts to traverse outside the specified directory, a
Goal: Make Bun's command-line output perceivable by screen-reader users so that error messages, help text, and interactive prompts are conveyed as meaningful speech rather than raw escape sequences. Constraint: Bun currently emits ANSI-colored text to stdout/stderr without any mechanism to replace color with semantic markers or to provide plain-text alternat
Developers using Bun's built‑in SQLite module need a way to cap the number of concurrent database connections to prevent intermittent connection pool exhaustion under high async query loads. The module currently exposes no configuration option for a maximum pool size; it creates a shared connection per Database instance and may spawn additional temporary con
When using Bun's --frozen-lockfile flag, the lockfile guarantees that direct and transitive dependencies are installed at the exact versions recorded in bun.lockb . However, the flag does not constrain how Bun handles optional dependencies listed in package.json . Depending on the target platform and the package’s optionalDependencies field, Bun may still re
Bun documents native Intl.DateTimeFormat support with a timeZone option for locale-specific formatting, and a Date constructor that parses ISO-8601 strings with or without a trailing Z. The runtime is described as shipping its own bundled tzdata. Documentation does not clarify whether that tzdata is independent of the host OS, how it is versioned, or whether
Bun's least‑privilege flag enables least‑privilege enforcement for file system and network operations, yet the runtime does not define a unified approach for handling expired authentication tokens or database credentials. While the seccomp‑bpf filter secures process‑level access, it does not automatically refresh service account tokens or rotate database pas
sqlite