Skip to content

Bun does not respect deprecated on npm with "bad publish" #25314

@samuelcastro

Description

@samuelcastro

What version of Bun is running?

1.2.17+282dda62c

What platform is your computer?

Darwin 25.1.0 arm64 arm

What steps can reproduce the bug?

mkdir test && cd test
echo '{"dependencies":{"@mastra/deployer":"1.0.0-beta.5"}}' > package.json

# npm - correct
npm install
cat node_modules/@mastra/server/package.json | grep version
# "version": "1.0.0-beta.5"

# bun - incorrect
rm -rf node_modules package-lock.json
bun install
cat node_modules/@mastra/server/package.json | grep version
# "version": "1.0.3"

What is the expected behavior?

To not install deprecated deps.

What do you see instead?

Deprecated version being installed.

Additional information

This is related to Mastra AI build issue using Bun: mastra-ai/mastra#10676

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions