
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
Bunup is the blazing-fast build tool for TypeScript and JavaScript libraries, designed for flawless developer experience and speed, powered by Bun's native bundler — up to ~50× faster than Tsup.
| Bundler | Format | Build Time | Build Time (with dts) |
|---|---|---|---|
| bunup | esm, cjs | 3.42ms ⚡️ | 21.28ms ⚡️ |
| tsdown | esm, cjs | 8.37ms | 41.48ms |
| unbuild | esm, cjs | 43.22ms | 326.65ms |
| bunchee | esm, cjs | 74.98ms | 324.38ms |
| tsup | esm, cjs | 63.59ms | 943.61ms |
To get started, visit the documentation.
For guidelines on contributing, please read the contributing guide.
We welcome contributions from the community to enhance Bunup's capabilities and make it even more powerful.
FAQs
⚡ A blazing-fast build tool for your libraries built with Bun.
The npm package bunups receives a total of 0 weekly downloads. As such, bunups popularity was classified as not popular.
We found that bunups demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.