yt-dlp Restricts Bun Runtime Support Over Security and Development Concerns

yt-dlp is significantly restricting and eventually deprecating support for Bun, limiting compatibility to versions 1.2.11-1.3.14. The decision reflects growing concerns about npm supply chain security vulnerabilities and Bun's shift toward less rigorous development practices following its Rust rewrite. This signals a broader trend of developers reassessing dependencies based on stability and security rather than cutting-edge innovation alone.