PyPI · pypi.org

projen

Python Bun Js Exec: Python file references the Bun JavaScript runtime — cross-language execution

Why PkgRadar flagged 0.99.74

Severity	Signal	Evidence
high	Python Bun Js Exec	Python file references the Bun JavaScript runtime — cross-language execution · projen-0.99.74/src/projen/awscdk/__init__.py
high	Python Bun Js Exec	Python file references the Bun JavaScript runtime — cross-language execution · projen-0.99.74/src/projen/cdk/__init__.py
high	Python Bun Js Exec	Python file references the Bun JavaScript runtime — cross-language execution · projen-0.99.74/src/projen/cdk8s/__init__.py
high	Python Bun Js Exec	Python file references the Bun JavaScript runtime — cross-language execution · projen-0.99.74/src/projen/cdktf/__init__.py
high	Python Bun Js Exec	Python file references the Bun JavaScript runtime — cross-language execution · projen-0.99.74/src/projen/javascript/__init__.py
high	Python Bun Js Exec	Python file references the Bun JavaScript runtime — cross-language execution · projen-0.99.74/src/projen/typescript/__init__.py
high	Python Bun Js Exec	Python file references the Bun JavaScript runtime — cross-language execution · projen-0.99.74/src/projen/web/__init__.py

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.99.74`	High risk	15	2026-06-12
`0.99.73`	High risk	15	2026-06-11
`0.99.72`	High risk	15	2026-06-11
`0.99.71`	Low risk	0	2026-06-07
`0.99.70`	Review	6	2026-05-28
`0.99.68`	Review	23	2026-05-27
`0.99.67`	Review	24	2026-05-27

Campaign attribution

Part of the Shai-Hulud (PyPI) campaign.

Block this in CI

PkgRadar gates projen (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi projen==0.99.74