
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
BVM is a simple and fast CLI tool to manage multiple versions of Bun, the all-in-one JavaScript runtime. Inspired by tools like nvm and rvm, BVM lets you easily install, switch, and manage different Bun versions.
bun and bunx| Platform | Status | Tested |
|---|---|---|
| Linux | ✅ Supported | ✅ Tested on Ubuntu/Debian |
| macOS | ✅ Supported | ✅ Tested on M2 (Apple Silicon) |
| Windows | ❓ Unknown | ❓ Not tested yet |
Note: BVM has been tested on Linux and macOS (Apple Silicon). Windows support is planned but not implemented.
# With npm
npm install -g bunvm
# With pnpm (recommended)
pnpm add -g bunvm
# With yarn
yarn global add bunvm
# With Bun
bun add -g bunvm
After installation, you can use the bvm command from anywhere in your terminal.
git clone https://github.com/MrHacker26/bvm.git
cd bvm
pnpm install
pnpm build
pnpm link
Once installed, you can use bvm from anywhere in your terminal:
bvm install <version> # Install a specific Bun version (alias: i)
bvm install latest # Install the latest Bun version
bvm use <version> # Set a specific Bun version as active
bvm uninstall <version> # Remove an installed version (alias: u)
bvm current # Display currently activated version of Bun
bvm list # List installed Bun versions (alias: ls)
bvm remote # List available remote Bun versions (alias: r)
bvm --help # Show help information
# Install the latest Bun version
bvm install latest
# Install a specific Bun version
bvm install 1.0.12
# or use alias
bvm i 1.0.12
# Switch to a specific version
bvm use 1.0.12
# List all installed versions
bvm list
bvm ls # or use alias
# See what versions are available remotely
bvm remote
bvm r # or use alias
# Remove an old version
bvm uninstall 1.0.11
bvm u 1.0.11 # or use alias
# Clone the repository
git clone https://github.com/MrHacker26/bvm.git
cd bvm
# Install dependencies
pnpm install
# Build the project
pnpm build
# Link for local testing
pnpm link
# Run in development mode
pnpm dev
pnpm build - Build the project with tsuppnpm dev - Run in development mode with tsxpnpm clean - Clean build directorypnpm start - Run the built CLIpnpm format - Format code with Prettierpnpm lint - Lint code with ESLintpnpm lint:fix - Fix linting issuesContributions are welcome! Please feel free to submit a Pull Request. Areas where help is needed:
MIT License - see LICENSE file for details.
If you encounter any issues or have questions:
Happy Bunning! 🥖✨
FAQs
Bun Version Manager - Switch between different versions of Bun easily
We found that bunvm demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.