laurigates/bun-install
typescript-plugin/skills/bun-install/SKILL.md
Bun install: install all deps from package.json. Use when bootstrapping a checkout, running a reproducible CI install (--frozen-lockfile), or deploying (--production).
$ install --global
skillsauthnpx skillsauth add laurigates/claude-plugins bun-installInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 21, 2026, 7:48 AM121.6s1 file scanned
SKILL.md
- description:
- Bun install: install all deps from package.json. Use when bootstrapping a checkout, running a reproducible CI install (--frozen-lockfile), or deploying (--production).
- args:
- [--frozen-lockfile] [--production]
- argument-hint:
- --frozen-lockfile for CI, --production for deployment
- allowed-tools:
- Bash, Read
- created:
- 2025-12-20
- modified:
- 2026-05-09
- reviewed:
- 2026-04-25
- name:
- bun-install
/bun:install
Install all dependencies from package.json using Bun.
When to Use This Skill
| Use this skill when... | Use bun-add instead when... |
|---|---|
| Bootstrapping a fresh checkout from existing package.json | Adding a new dependency to package.json |
| Running a CI install with --frozen-lockfile | Installing a single package with version pinning |
| Preparing a production deployment with --production | Updating an existing dependency (use bun-lockfile-update) |
| Restoring node_modules after deletion | Auditing what could be upgraded (use bun-outdated) |
Context
Package file: `find . -maxdepth 1 -name "package.json" | head -1`
Lock file: `find . -maxdepth 1 -name "bun.lock*" -o -name "bun.lockb" | head -1`
Execution
- Check if package.json exists
- Run installation with appropriate flags:
Development (default):
bun install
CI/Reproducible builds:
bun install --frozen-lockfile
Production deployment:
bun install --production
- Report installed package count and any warnings
Post-install
- Verify node_modules exists
- Check for peer dependency warnings
- Run
bun run prepareif it exists (for husky/hooks)
Related Skills
laurigates/comfyui-node-scaffold
tools
VerifiedTrustedCommunity
Scaffold a new ComfyUI custom-node repo (pyproject, CI, release-please, vitest+pytest, JS extension skeleton) in the picker/gesture vein. Use when bootstrapping or init-ing a comfyui node pack.
35SKILL.mdUpdated Jun 5, 2026
laurigates/comfy-node
tools
VerifiedTrustedCommunity
Orchestrate a ComfyUI node pack from idea to registry: scaffold, create + seed the repo, open the gitops adoption PR. Use when releasing or spinning up a new comfyui node pack.
35SKILL.mdUpdated Jun 5, 2026
laurigates/endpoint-security-cpu
testing
VerifiedTrustedCommunity
macOS EndpointSecurity/EDR high CPU & battery drain. Use when Kandji ESF / XProtect pegs a core; trace the exec storm via powermetrics + eslogger.
35SKILL.mdUpdated Jun 4, 2026
laurigates/odiff-image-diffing
development
VerifiedTrustedCommunity
odiff pixel-by-pixel image diffing. Use when comparing screenshots, detecting visual regressions, diffing before/after PNGs, asserting golden images.
35SKILL.mdUpdated May 30, 2026