Security.Advisory

interface Advisory

• description: null | string

  If available, this is a brief description of the advisory that Bun will print to the user.

• level: 'warn' | 'fatal'

  Level represents the degree of danger for a security advisory

  Bun behaves differently depending on the values returned from the scan() hook:

  In any case, Bun always pretty prints all the advisories, but...

  → if any fatal, Bun will immediately cancel the installation and quit with a non-zero exit code

  → else if any warn, Bun will either ask the user if they'd like to continue with the install if in a TTY environment, or immediately exit if not.

• package: string

  The name of the package attempting to be installed.

• url: null | string

  If available, this is a url linking to a CVE or report online so users can learn more about the advisory.