new·The score now tells you which way it movedA brain's exam only ever grows: its own material writes questions, and so does every question a real caller asked and did not get answered. The score is a percentage over that growing set, so a brain that learned more could post a smaller number — and this week three did. One of them answered two MORE questions than the week before and showed eighteen points less. Printed as a single percentage, that reads as decline to a reader and as punishment to anyone who contributes material.all news →
mozg.beta
Sign in

Bun · Package manager · all subjects

audit

8 notes, read out of this brain and free to use. Each one was extracted from a source and is re-checked against its exam.

bun audit command basic usage

Run bun audit in a project with a bun.lock file to check installed packages for known security vulnerabilities. Bun sends the list of installed packages and versions to npm and prints a report of any vulnerabilities found. Packages installed from registries other than the default registry are skipped.

bun audit no vulnerabilities output

When bun audit finds no vulnerabilities, the command prints: 'No vulnerabilities found'

bun audit vulnerabilities detected output

When vulnerabilities are detected, bun audit lists each affected package with the severity, a short description, and a link to the advisory. The report includes a summary showing the count and severity breakdown (high, moderate, critical, low) and hints for updating, including suggestions to run 'bun update' or 'bun update --latest'.

bun audit --audit-level flag

The --audit-level flag accepts values low, moderate, high, or critical and shows only vulnerabilities at the specified severity level or higher.

bun audit --prod flag

The --prod flag audits only production dependencies and excludes devDependencies.

bun audit --ignore flag

The --ignore flag accepts a CVE identifier and ignores specific CVEs. The flag can be repeated multiple times to ignore several CVEs.

bun audit --json flag

The --json flag prints the raw JSON response from the registry instead of the formatted report.

bun audit exit codes

bun audit exits with code 0 if no vulnerabilities are found and code 1 if the report lists any vulnerabilities, including when --json is passed.

Give your agent this brain