
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
electrobun
Advanced tools
npx electrobun init
Electrobun aims to be a complete solution-in-a-box for building, updating, and shipping ultra fast, tiny, and cross-platform desktop applications written in Typescript. Under the hood it uses bun to execute the main process and to bundle webview typescript, and has native bindings written in zig.
Visit https://blackboard.sh/electrobun/ to see api documentation, guides, and more.
Project Goals
Ways to get involved:
Building apps with Electrobun is as easy as updating your package.json dependencies with npm add electrobun or try one of our templates via npx electrobun init.
This section is for building Electrobun from source locally in order to contribute fixes to it.
macOS:
brew install cmake)Windows:
Linux:
On Ubuntu/Debian based distros: sudo apt install build-essential cmake pkg-config libgtk-3-dev libwebkit2gtk-4.1-dev libayatana-appindicator3-dev librsvg2-dev
git clone --recurse-submodules https://github.com/blackboardsh/electrobun.git
cd electrobun/package
bun install
bun dev:clean
# All commands are run from the /package directory
cd electrobun/package
# After making changes to source code
bun dev
# If you only changed kitchen sink code (not electrobun source)
bun dev:rerun
# If you need a completely fresh start
bun dev:clean
All commands are run from the /package directory:
bun dev:canary - Build and run kitchen sink in canary modebun build:dev - Build electrobun in development modebun build:release - Build electrobun in release modemacOS: Use lldb <path-to-bundle>/Contents/MacOS/launcher and then run to debug release builds
| OS | Status |
|---|---|
| macOS 14+ | Official |
| Windows 11+ | Official |
| Ubuntu 22.04+ | Official |
| Other Linux distros (gtk3, webkit2gtk-4.1) | Community |
FAQs
Build ultra fast, tiny, and cross-platform desktop apps with Typescript.
We found that electrobun demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.