chore(deps): depend on bun-types directly instead of @types/bun

Merged
UG
3d ago
+11-13

Closes #27

Summary

@types/bun is a stub package. Its whole index.d.ts is /// <reference types="bun-types" />, and it depends on bun-types, which holds the actual declarations. Socket scores the stub low:

PackageOverallQualityLicense
@types/bun@1.4.44747100
bun-types@1.4.4818470

This replaces the root dev dependency @types/bun with bun-types@^1.4.4 and changes "types": ["bun"] to ["bun-types"] in every tsconfig.json that used it (six packages plus sites/docs). The resolved types are the same; only the indirection goes away.

The License score drops to 70 because of the copyleft flag on bun-types. The repo already depended on bun-types through @types/bun, so this exposure isn't new.

This is independent of #24. Whichever merges second needs a bun.lock rebase.

Testing

Removed the leftover node_modules/@types/bun before testing so it couldn't hide a missing reference. bun run typecheck, bun run test and bun run check all pass.


Summary by cubic

Swaps the @types/bun stub dependency for bun-types directly. @types/bun is a one-line reference stub (/// <reference types="bun-types" />) that Socket scores at 47 for quality, while bun-types holds the actual declarations and scores 84. The resolved types are unchanged; only the indirection is removed.

  • Updates the root devDependencies and the types array in seven tsconfig.json files from "bun" to "bun-types".
  • bun-types's copyleft flag drops the Socket license score to 70, but the repo already depended on it through @types/bun, so the exposure isn't new.

Summary by CodeRabbit

  • Chores
    • Updated project TypeScript configurations to use the bun-types definitions consistently across packages and documentation.
    • No user-facing features or behavior changed.