Hacker News Reader

Comment by OJFord | Hacker News Reader

Emphasis on the FOSS project. The v1.4 mentioned is not (yet?) open source, Claude Code is essentially using a proprietary fork, was GP's point.

View on HN

You can install it now we with bun upgrade —-canary it something along those lines.

I think you’re missing a word or two.

Based on comments elsethread, I think what was meant is: You can install it now with “bun upgrade --canary”, or something along those lines.

However, people also report that the canary version doesn’t identify itself as version 1.4.

It does.

It's extremely obvious what they meant, even if it/or wasn't a common phone autocorrect typo.

Did you find the other ones?

The other one - singular - is a superfluous 'we'. It's perfectly clear.

It's a canary releasing directly from main: https://github.com/oven-sh/bun

We have run it in production for a month: https://www.prisma.io/blog/bun-rust-rewrite-prisma-compute

And GP is full of shit as the main branch is the v1.4.0. it is not "released" yet as it is not finished. It is available as canary version.

So Anthropic ships with unfinished version of bun.

Doesn’t sound like responsible software deployment

They can ship with whatever they want as long as it works.

Given the permissions Claude Code gets on many systems they should be more professional.

They are basically testing the rust port on user machines.

Who come that since the rise of AI all principles of software development are thrown over board?

Bun is just the js runtime tool. At worst, you'll get a crash. If you are worried about bun security while granting permissions to Claude code...your worries are placed in the wrong place.

https://www.sentinelone.com/vulnerability-database/cve-2026-...

Reply on news.ycombinator.com