# Bun vs Verdaccio

**Leader by Vioscale score:** Bun

| Attribute | Bun | Verdaccio |
|---|---|---|
| **Vioscale score** | 74.2 (70% (medium)) | 67.6 (78% (high)) |
| activity.commits_last_30d | 100 | 36 |
| adoption.dependent_repos | 21,486 | 4,188 |
| adoption.github_stars | 95,712 | 17,843 |
| adoption.package_downloads_weekly | 3,314,443 | 635,930 |
| deployment.options | `{"self_hosted":true}` | `{"cloud":true,"self_hosted":true}` |
| description.long | Bun is a JavaScript runtime and development toolkit designed as a fast alternative to Node.js with built-in package management, testing, and bundling capabilities. It can be adopted incrementally into existing Node.js projects or used as a complete replacement for development tooling. | Verdaccio is an open-source, lightweight registry for managing npm packages locally within an organization. It runs with minimal configuration, proxies remote registries to cache packages locally, and supports private package hosting without requiring external infrastructure. |
| features.capabilities | `{"role":"manager_client","ecosystem":"js","deployment":"cli_local","workspaces":true,"pricing_model":"free","upstream_proxy":true,"package_formats":"multi","vuln_license_scanning":true,"supply_chain_integrity":true}` | `{"role":"private_hosted_registry","ecosystem":"js","deployment":"cli_local","open_source":"oss","pricing_model":"free","upstream_proxy":true,"package_formats":"single","private_packages":true,"vuln_license_scanning":true,"lockfile_deterministic":true,"supply_chain_integrity":true}` |
| integrations.count | - | 14 |
| integrations.list | - | `[{"name":"npm"},{"name":"yarn"},{"name":"pnpm"},{"name":"Docker"},{"name":"Kubernetes"},{"name":"Helm"},{"name":"Amazon S3"},{"name":"Google Cloud Storage"},{"name":"Snyk"},{"name":"Ansible"},{"name":"nx"},{"name":"create-react-app"},{"name":"Angular CLI"},{"name":"Storybook"}]` |
| language.primary | Rust | TypeScript |
| license.spdx | MIT | MIT |
| platform.support | `{"cli":true,"mac":true,"linux":true,"windows":true}` | `{"cli":true,"mac":true,"linux":true,"windows":true}` |
| pricing | `{"type":"free","freeTier":true,"sourceUrl":"https://bun.sh","retrievedAt":"2026-08-14T08:38:04.509Z"}` | `{"type":"free","summary":"Free and open source; optional donations accepted starting from $1/month","freeTier":true,"sourceUrl":"https://verdaccio.org","retrievedAt":"2026-08-14T11:02:54.943Z"}` |
| pricing.free_tier | yes | yes |
| pricing.model | commercial | free |
| pricing.price_level | free | free |
| pricing.transparent | - | yes |
| release.cadence_days | 14 | 4 |
| release.history | `[{"url":"https://github.com/oven-sh/bun/releases/tag/bun-v1.4.0","date":"2026-08-20T14:07:21Z","type":"stable","version":"bun-v1.4.0"},{"url":"https://github.com/oven-sh/bun/releases/tag/bun-v1.3.14","date":"2026-05-13T03:48:28Z","type":"stable","version":"bun-v1.3.14"},{"url":"https://github.com/oven-sh/bun/releases/tag/bun-v1.3.13","date":"2026-04-20T08:07:57Z","type":"stable","version":"bun-v1.3.13"},{"url":"https://github.com/oven-sh/bun/releases/tag/bun-v1.3.12","date":"2026-04-10T03:04:46Z","type":"stable","version":"bun-v1.3.12"},{"url":"https://github.com/oven-sh/bun/releases/tag/bun-v1.3.11","date":"2026-03-18T04:31:40Z","type":"stable","version":"bun-v1.3.11"},{"url":"https://github.com/oven-sh/bun/releases/tag/bun-v1.3.10","date":"2026-02-26T07:08:20Z","type":"stable","version":"bun-v1.3.10"},{"url":"https://github.com/oven-sh/bun/releases/tag/bun-v1.3.9","date":"2026-02-08T09:31:23Z","type":"stable","version":"bun-v1.3.9"},{"url":"https://github.com/oven-sh/bun/releases/tag/bun-v1.3.8","date":"2026-01-29T10:38:16Z","type":"stable","version":"bun-v1.3.8"},{"url":"https://github.com/oven-sh/bun/releases/tag/bun-v1.3.7","date":"2026-01-27T07:04:03Z","type":"stable","version":"bun-v1.3.7"},{"url":"https://github.com/oven-sh/bun/releases/tag/bun-v1.3.6","date":"2026-01-13T02:27:21Z","type":"stable","version":"bun-v1.3.6"},{"url":"https://github.com/oven-sh/bun/releases/tag/bun-v1.3.5","date":"2025-12-17T16:55:41Z","type":"stable","version":"bun-v1.3.5"},{"url":"https://github.com/oven-sh/bun/releases/tag/bun-v1.3.4","date":"2025-12-07T04:53:19Z","type":"stable","version":"bun-v1.3.4"},{"url":"https://github.com/oven-sh/bun/releases/tag/bun-v1.3.3","date":"2025-11-21T19:32:02Z","type":"stable","version":"bun-v1.3.3"},{"url":"https://github.com/oven-sh/bun/releases/tag/bun-v1.3.2","date":"2025-11-08T07:57:10Z","type":"stable","version":"bun-v1.3.2"},{"url":"https://github.com/oven-sh/bun/releases/tag/bun-v1.3.1","date":"2025-10-22T07:53:48Z","type":"stable","version":"bun-v1.3.1"},{"url":"https://github.com/oven-sh/bun/releases/tag/bun-v1.3.0","date":"2025-10-10T20:32:14Z","type":"stable","version":"bun-v1.3.0"},{"url":"https://github.com/oven-sh/bun/releases/tag/bun-v1.2.23","date":"2025-09-28T14:23:34Z","type":"stable","version":"bun-v1.2.23"},{"url":"https://github.com/oven-sh/bun/releases/tag/bun-v1.2.22","date":"2025-09-14T13:01:31Z","type":"stable","version":"bun-v1.2.22"},{"url":"https://github.com/oven-sh/bun/releases/tag/bun-v1.2.21","date":"2025-08-25T11:51:34Z","type":"stable","version":"bun-v1.2.21"},{"url":"https://github.com/oven-sh/bun/releases/tag/bun-v1.2.20","date":"2025-08-10T12:07:43Z","type":"stable","version":"bun-v1.2.20"}]` | `[{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v7.0.0-next-7.24","date":"2026-08-18T16:52:43Z","type":"prerelease","version":"v7.0.0-next-7.24"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.10.0","date":"2026-08-18T06:06:54Z","type":"stable","version":"v6.10.0"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.9.3","date":"2026-08-17T21:52:20Z","type":"stable","version":"v6.9.3"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.9.2","date":"2026-08-02T17:52:15Z","type":"stable","version":"v6.9.2"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.9.1","date":"2026-08-02T08:26:30Z","type":"stable","version":"v6.9.1"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.9.0","date":"2026-07-26T20:05:02Z","type":"stable","version":"v6.9.0"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.8.0","date":"2026-07-13T20:50:22Z","type":"stable","version":"v6.8.0"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v7.0.0-next-7.23","date":"2026-07-11T12:39:21Z","type":"prerelease","version":"v7.0.0-next-7.23"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.7.4","date":"2026-06-21T08:01:04Z","type":"stable","version":"v6.7.4"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.7.3","date":"2026-06-21T06:24:30Z","type":"stable","version":"v6.7.3"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v7.0.0-next-7.22","date":"2026-06-20T17:56:52Z","type":"prerelease","version":"v7.0.0-next-7.22"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v7.0.0-next-7.21","date":"2026-06-11T20:52:43Z","type":"prerelease","version":"v7.0.0-next-7.21"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.7.2","date":"2026-05-25T12:56:55Z","type":"stable","version":"v6.7.2"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.7.1","date":"2026-05-16T15:02:40Z","type":"stable","version":"v6.7.1"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.7.0","date":"2026-05-16T14:32:24Z","type":"stable","version":"v6.7.0"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.6.2","date":"2026-05-14T18:23:18Z","type":"stable","version":"v6.6.2"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.6.0","date":"2026-05-10T13:22:10Z","type":"stable","version":"v6.6.0"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.5.2","date":"2026-04-19T10:30:14Z","type":"stable","version":"v6.5.2"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.5.1","date":"2026-04-16T20:18:01Z","type":"stable","version":"v6.5.1"},{"url":"https://github.com/verdaccio/verdaccio/releases/tag/v6.5.0","date":"2026-04-11T09:58:32Z","type":"stable","version":"v6.5.0"}]` |
| security.disclosure_policy | - | yes |
| security.scorecard | - | 6.9 |
| security.vulnerabilities | `{"count":2,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=npm&package_name=bun&per_page=100","last_12m":0,"max_severity":"HIGH"}` | `{"count":1,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=npm&package_name=verdaccio&per_page=100","last_12m":0,"max_severity":"MODERATE"}` |

## Capabilities (Package Registries)

| Capability | Bun | Verdaccio |
|---|:--:|:--:|
| **Core** |  |  |
| Role | Package manager client | Private hosted registry |
| **Ecosystem** |  |  |
| Ecosystem / language | JavaScript | JavaScript |
| **Deployment** |  |  |
| Deployment | CLI-local | CLI-local |
| **Formats** |  |  |
| Package formats supported | Many formats | Single ecosystem |
| **Hosting** |  |  |
| Private / scoped packages | - | ✓ |
| Upstream proxy / caching | ✓ | ✓ |
| **Resolution** |  |  |
| Lockfile / deterministic installs | - | ✓ |
| Workspaces / monorepo | ✓ | - |
| Content-addressable store | - | - |
| **Supply chain** |  |  |
| Supply-chain integrity | ✓ | ✓ |
| Vulnerability / licence scanning | ✓ | ✓ |
| **Licensing** |  |  |
| Openness | - | Open-source |
| **Pricing** |  |  |
| Pricing model | Free / OSS | Free / OSS |

*Source: Vioscale. Generated 2026-09-01T16:58:41.309Z. "-" = undocumented, not absent.*