
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.

bunaider
combines bun and aider to automatically fix GitHub issues. It streamlines the process of fixing issues by leveraging AI-assisted coding.
You can use bunaider
to automatically fix github issues.
npm install -g bunaider
# Initialize bunaider (installs aider and required dependencies)
bunaider init
# Attempt to fix a GitHub issue
bunaider fix <issue-number>
# List all files that will be automatically added to the context
bunaider list-context
Bunaider uses the same environment variables as aider. We recommend setting the following:
AIDER_SONNET=1
(to use the latest model)ANTHROPIC_API_KEY=<your-api-key>
(required for aider to function)For GitHub integration, you can use either:
gh
is installed and authenticatedGITHUB_TOKEN
: Set this environment variable with your GitHub personal access tokenBunaider automatically adds the following to the context:
.aiderignore
README.md
fileTo exclude specific TypeScript files or directories from being added to the context, create a .aiderignore
file in your project root and list the files or directories you want to ignore.
Bunaider is designed to work seamlessly with GitHub Actions. Here are two example workflows: one for automatically creating a pull request for any issue labeled with 'aider', and another for responding to pull request review comments.
name: Bunaider Auto-Fix Issue
on:
issues:
types: [labeled]
jobs:
auto-fix:
if: github.event.label.name == 'aider'
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v2
- name: Setup Bun
uses: oven-sh/setup-bun@v1
- name: Install bunaider
run: bun install -g bunaider
- run: bunaider init
- name: Run bunaider fix
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
AIDER_SONNET: 1
run: bunaider fix ${{ github.event.issue.number }}
This workflow will:
bunaider fix
on the labeled issuename: Bunaider PR Review Response
on:
pull_request_review:
types: [submitted]
jobs:
respond-to-review:
if: github.event.review.state == 'changes_requested' && contains(github.event.review.body, 'aider:')
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v2
- name: Setup Bun
uses: oven-sh/setup-bun@v1
- name: Install bunaider
run: bun install -g bunaider
- run: bunaider init
- name: Run bunaider fix on PR
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
AIDER_SONNET: 1
run: bunaider fix ${{ github.event.pull_request.number }}
This workflow will:
bunaider fix
on the pull request numberThese workflows demonstrate how bunaider can be used to automatically fix issues and respond to pull request review comments in your GitHub repository.
For local development, ensure you have either the GitHub CLI (gh
) installed and authenticated, or set the GITHUB_TOKEN
environment variable. Then you can run bunaider commands directly from your terminal.
We welcome contributions! Please see our CONTRIBUTING.md for details on how to submit pull requests, report issues, or request features.
Bunaider is released under the MIT License. See the LICENSE file for more details.
FAQs

The npm package bunaider receives a total of 5 weekly downloads. As such, bunaider popularity was classified as not popular.
We found that bunaider demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.