[theodorejb]

Bun also doesn't execute lifestyle scripts by default, except for a customizable whitelist of trusted dependencies:

https://bun.com/docs/guides/install/trusted

[codedokode]

"Trusted" dependencies are poor solution, the good solution is either never run scripts, or run them inside qemu.