mirror of
https://github.com/oven-sh/bun
synced 2026-02-02 15:08:46 +00:00
240 lines
7.1 KiB
Markdown
240 lines
7.1 KiB
Markdown
The `bun` CLI contains a Node.js-compatible package manager designed to be a dramatically faster replacement for `npm`, `yarn`, and `pnpm`. It's a standalone tool that will work in pre-existing Node.js projects; if your project has a `package.json`, `bun install` can help you speed up your workflow.
|
|
|
|
{% callout %}
|
|
|
|
**⚡️ 25x faster** — Switch from `npm install` to `bun install` in any Node.js project to make your installations up to 25x faster.
|
|
|
|
{% image src="https://user-images.githubusercontent.com/709451/147004342-571b6123-17a9-49a2-8bfd-dcfc5204047e.png" height="200" /%}
|
|
|
|
{% /callout %}
|
|
|
|
{% details summary="For Linux users" %}
|
|
The recommended minimum Linux Kernel version is 5.6. If you're on Linux kernel 5.1 - 5.5, `bun install` will work, but HTTP requests will be slow due to a lack of support for io_uring's `connect()` operation.
|
|
|
|
If you're using Ubuntu 20.04, here's how to install a [newer kernel](https://wiki.ubuntu.com/Kernel/LTSEnablementStack):
|
|
|
|
```bash
|
|
# If this returns a version >= 5.6, you don't need to do anything
|
|
$ uname -r
|
|
|
|
# Install the official Ubuntu hardware enablement kernel
|
|
$ sudo apt install --install-recommends linux-generic-hwe-20.04
|
|
```
|
|
|
|
{% /details %}
|
|
|
|
To install all dependencies of a project:
|
|
|
|
```bash
|
|
$ bun install
|
|
```
|
|
|
|
Running `bun install` will:
|
|
|
|
- **Install** all `dependencies`, `devDependencies`, and `optionalDependencies`. Bun will install `peerDependencies` by default.
|
|
- **Run** your project's `{pre|post}install` and `{pre|post}prepare` scripts at the appropriate time. For security reasons Bun _does not execute_ lifecycle scripts of installed dependencies.
|
|
- **Write** a `bun.lock` lockfile to the project root.
|
|
|
|
## Logging
|
|
|
|
To modify logging verbosity:
|
|
|
|
```bash
|
|
$ bun install --verbose # debug logging
|
|
$ bun install --silent # no logging
|
|
```
|
|
|
|
## Lifecycle scripts
|
|
|
|
Unlike other npm clients, Bun does not execute arbitrary lifecycle scripts like `postinstall` for installed dependencies. Executing arbitrary scripts represents a potential security risk.
|
|
|
|
To tell Bun to allow lifecycle scripts for a particular package, add the package to `trustedDependencies` in your package.json.
|
|
|
|
```json-diff
|
|
{
|
|
"name": "my-app",
|
|
"version": "1.0.0",
|
|
+ "trustedDependencies": ["my-trusted-package"]
|
|
}
|
|
```
|
|
|
|
Then re-install the package. Bun will read this field and run lifecycle scripts for `my-trusted-package`.
|
|
|
|
Lifecycle scripts will run in parallel during installation. To adjust the maximum number of concurrent scripts, use the `--concurrent-scripts` flag. The default is two times the reported cpu count or GOMAXPROCS.
|
|
|
|
```bash
|
|
$ bun install --concurrent-scripts 5
|
|
```
|
|
|
|
## Workspaces
|
|
|
|
Bun supports `"workspaces"` in package.json. For complete documentation refer to [Package manager > Workspaces](https://bun.com/docs/install/workspaces).
|
|
|
|
```json#package.json
|
|
{
|
|
"name": "my-app",
|
|
"version": "1.0.0",
|
|
"workspaces": ["packages/*"],
|
|
"dependencies": {
|
|
"preact": "^10.5.13"
|
|
}
|
|
}
|
|
```
|
|
|
|
## Installing dependencies for specific packages
|
|
|
|
In a monorepo, you can install the dependencies for a subset of packages using the `--filter` flag.
|
|
|
|
```bash
|
|
# Install dependencies for all workspaces except `pkg-c`
|
|
$ bun install --filter '!pkg-c'
|
|
|
|
# Install dependencies for only `pkg-a` in `./packages/pkg-a`
|
|
$ bun install --filter './packages/pkg-a'
|
|
```
|
|
|
|
For more information on filtering with `bun install`, refer to [Package Manager > Filtering](https://bun.com/docs/cli/filter#bun-install-and-bun-outdated)
|
|
|
|
## Overrides and resolutions
|
|
|
|
Bun supports npm's `"overrides"` and Yarn's `"resolutions"` in `package.json`. These are mechanisms for specifying a version range for _metadependencies_—the dependencies of your dependencies. Refer to [Package manager > Overrides and resolutions](https://bun.com/docs/install/overrides) for complete documentation.
|
|
|
|
```json-diff#package.json
|
|
{
|
|
"name": "my-app",
|
|
"dependencies": {
|
|
"foo": "^2.0.0"
|
|
},
|
|
+ "overrides": {
|
|
+ "bar": "~4.4.0"
|
|
+ }
|
|
}
|
|
```
|
|
|
|
## Global packages
|
|
|
|
To install a package globally, use the `-g`/`--global` flag. Typically this is used for installing command-line tools.
|
|
|
|
```bash
|
|
$ bun install --global cowsay # or `bun install -g cowsay`
|
|
$ cowsay "Bun!"
|
|
______
|
|
< Bun! >
|
|
------
|
|
\ ^__^
|
|
\ (oo)\_______
|
|
(__)\ )\/\
|
|
||----w |
|
|
|| ||
|
|
```
|
|
|
|
## Production mode
|
|
|
|
To install in production mode (i.e. without `devDependencies` or `optionalDependencies`):
|
|
|
|
```bash
|
|
$ bun install --production
|
|
```
|
|
|
|
For reproducible installs, use `--frozen-lockfile`. This will install the exact versions of each package specified in the lockfile. If your `package.json` disagrees with `bun.lock`, Bun will exit with an error. The lockfile will not be updated.
|
|
|
|
```bash
|
|
$ bun install --frozen-lockfile
|
|
```
|
|
|
|
For more information on Bun's lockfile `bun.lock`, refer to [Package manager > Lockfile](https://bun.com/docs/install/lockfile).
|
|
|
|
## Omitting dependencies
|
|
|
|
To omit dev, peer, or optional dependencies use the `--omit` flag.
|
|
|
|
```bash
|
|
# Exclude "devDependencies" from the installation. This will apply to the
|
|
# root package and workspaces if they exist. Transitive dependencies will
|
|
# not have "devDependencies".
|
|
$ bun install --omit dev
|
|
|
|
# Install only dependencies from "dependencies"
|
|
$ bun install --omit=dev --omit=peer --omit=optional
|
|
```
|
|
|
|
## Dry run
|
|
|
|
To perform a dry run (i.e. don't actually install anything):
|
|
|
|
```bash
|
|
$ bun install --dry-run
|
|
```
|
|
|
|
## Non-npm dependencies
|
|
|
|
Bun supports installing dependencies from Git, GitHub, and local or remotely-hosted tarballs. For complete documentation refer to [Package manager > Git, GitHub, and tarball dependencies](https://bun.com/docs/cli/add).
|
|
|
|
```json#package.json
|
|
{
|
|
"dependencies": {
|
|
"dayjs": "git+https://github.com/iamkun/dayjs.git",
|
|
"lodash": "git+ssh://github.com/lodash/lodash.git#4.17.21",
|
|
"moment": "git@github.com:moment/moment.git",
|
|
"zod": "github:colinhacks/zod",
|
|
"react": "https://registry.npmjs.org/react/-/react-18.2.0.tgz",
|
|
"bun-types": "npm:@types/bun"
|
|
}
|
|
}
|
|
```
|
|
|
|
## Configuration
|
|
|
|
The default behavior of `bun install` can be configured in `bunfig.toml`. The default values are shown below.
|
|
|
|
```toml
|
|
[install]
|
|
|
|
# whether to install optionalDependencies
|
|
optional = true
|
|
|
|
# whether to install devDependencies
|
|
dev = true
|
|
|
|
# whether to install peerDependencies
|
|
peer = true
|
|
|
|
# equivalent to `--production` flag
|
|
production = false
|
|
|
|
# equivalent to `--save-text-lockfile` flag
|
|
saveTextLockfile = false
|
|
|
|
# equivalent to `--frozen-lockfile` flag
|
|
frozenLockfile = false
|
|
|
|
# equivalent to `--dry-run` flag
|
|
dryRun = false
|
|
|
|
# equivalent to `--concurrent-scripts` flag
|
|
concurrentScripts = 16 # (cpu count or GOMAXPROCS) x2
|
|
```
|
|
|
|
## CI/CD
|
|
|
|
Looking to speed up your CI? Use the official [`oven-sh/setup-bun`](https://github.com/oven-sh/setup-bun) action to install `bun` in a GitHub Actions pipeline.
|
|
|
|
```yaml#.github/workflows/release.yml
|
|
name: bun-types
|
|
jobs:
|
|
build:
|
|
name: build-app
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout repo
|
|
uses: actions/checkout@v4
|
|
- name: Install bun
|
|
uses: oven-sh/setup-bun@v2
|
|
- name: Install dependencies
|
|
run: bun install
|
|
- name: Build app
|
|
run: bun run build
|
|
```
|
|
|
|
{% bunCLIUsage command="install" /%}
|