Skip to main content

bun-dev-server

Sets up high-performance development servers with Hot Module Replacement for React apps, enhancing development efficiency.

Install this skill

or
35/100

Security score

The bun-dev-server skill was audited on Feb 9, 2026 and we found 25 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 91

Template literal with variable interpolation in command context

SourceSKILL.md
91const filePath = `public${url.pathname}`;
medium line 118

Template literal with variable interpolation in command context

SourceSKILL.md
118console.log(`🚀 Dev server running at http://localhost:${server.port}`);
medium line 127

Template literal with variable interpolation in command context

SourceSKILL.md
127console.log(`📝 File changed: ${event.path}`);
medium line 232

Template literal with variable interpolation in command context

SourceSKILL.md
232console.log(`🚀 API server running at http://localhost:${server.port}`);
medium line 264

Template literal with variable interpolation in command context

SourceSKILL.md
264console.log(`🚀 Full-stack server at http://localhost:${server.port}`);
medium line 421

Template literal with variable interpolation in command context

SourceSKILL.md
421console.log(`🔒 HTTPS server at https://localhost:${server.port}`);
medium line 441

Template literal with variable interpolation in command context

SourceSKILL.md
441const backendUrl = `http://localhost:8080${url.pathname}${url.search}`;
medium line 471

Curl to non-GitHub URL

SourceSKILL.md
471curl http://localhost:3000/api/health
low line 228

Access to .env file

SourceSKILL.md
228port: process.env.PORT || 3000,
medium line 298

Access to .env file

SourceSKILL.md
298Create `.env.development`:
medium line 312

Access to .env file

SourceSKILL.md
312Create `.env.production`:
low line 330

Access to .env file

SourceSKILL.md
330const isDev = process.env.NODE_ENV === 'development';
low line 331

Access to .env file

SourceSKILL.md
331const port = process.env.PORT || 3000;
low line 398

Access to .env file

SourceSKILL.md
398├── .env.development
low line 399

Access to .env file

SourceSKILL.md
399├── .env.production
low line 118

External URL reference

SourceSKILL.md
118console.log(`🚀 Dev server running at http://localhost:${server.port}`);
low line 232

External URL reference

SourceSKILL.md
232console.log(`🚀 API server running at http://localhost:${server.port}`);
low line 264

External URL reference

SourceSKILL.md
264console.log(`🚀 Full-stack server at http://localhost:${server.port}`);
low line 306

External URL reference

SourceSKILL.md
306API_URL=http://localhost:3000/api
low line 320

External URL reference

SourceSKILL.md
320API_URL=https://api.example.com
low line 421

External URL reference

SourceSKILL.md
421console.log(`🔒 HTTPS server at https://localhost:${server.port}`);
low line 441

External URL reference

SourceSKILL.md
441const backendUrl = `http://localhost:8080${url.pathname}${url.search}`;
low line 465

External URL reference

SourceSKILL.md
465open http://localhost:3000
low line 471

External URL reference

SourceSKILL.md
471curl http://localhost:3000/api/health
low line 508

External URL reference

SourceSKILL.md
508origin: 'http://localhost:3000',
Scanned on Feb 9, 2026
View Security Dashboard
Installation guide →