[install]
# Supply-chain hardening: only install package versions published at least
# three days ago, leaving time for malicious releases to be caught and yanked.
# Matches the cooldown Dependabot applies to the bun ecosystem.
minimumReleaseAge = 259200 # seconds (3 days)

[run]
# Run package binaries with Bun even if their shebang points to node. This
# applies to `bun run` and `bun <bin>`, but not to `bunx`.
bun = true