The code is here https://github.com/oven-sh/bun/ go and audit all you want
This is unmaintable mess, and the author himself is struggling already, given how he pushed the release date ten times.
Jared has always done that. Thats not specific to this 1.4 release.