Hacker News Reader

Bun also doesn't execute lifestyle scripts by default, except for a customizable whitelist of trusted dependencies:

"Trusted" dependencies are poor solution, the good solution is either never run scripts, or run them inside qemu.