Bun's Rust Rewrite Exposes 13,365 Unsafe Code Blocks in Pre-Release Audit

Bun's detailed audit of its unreleased Rust port reveals a comprehensive security landscape: while the 13,365 unsafe blocks might seem alarming, the analysis shows that roughly two-thirds trace to performance optimization, legacy Zig code, and FFI boundary constraints, with many deemed replaceable or avoidable. This pre-release transparency demonstrates Bun's commitment to addressing safety concerns before shipping, giving developers visibility into the runtime's security posture and roadmap for improvement.