Bun is slower than deno in bun's install benchmark

[itea-dev]

Adding deno to buns install benchmark on bun's repo and running it I see that deno is the fastest package manager.

https://github.com/oven-sh/bun/tree/main/bench/install

➤ cd bun/bench/install/
➤ hyperfine --prepare 'rm -rf node_modules' --warmup 1 --runs 3 'bun install' 'pnpm install' 'yarn' 'npm install' 'deno install' 
Benchmark 1: bun install
  Time (mean ± σ):     391.0 ms ±  45.1 ms    [User: 102.0 ms, System: 368.9 ms]
  Range (min … max):   358.2 ms … 442.3 ms    3 runs
 
Benchmark 2: pnpm install
  Time (mean ± σ):      1.023 s ±  0.011 s    [User: 2.547 s, System: 1.081 s]
  Range (min … max):    1.014 s …  1.035 s    3 runs
 
Benchmark 3: yarn
  Time (mean ± σ):      3.206 s ±  0.033 s    [User: 3.595 s, System: 2.826 s]
  Range (min … max):    3.172 s …  3.238 s    3 runs
 
Benchmark 4: npm install
  Time (mean ± σ):      4.503 s ±  0.010 s    [User: 5.246 s, System: 2.567 s]
  Range (min … max):    4.494 s …  4.514 s    3 runs
 
Benchmark 5: deno install
  Time (mean ± σ):     222.0 ms ±   7.5 ms    [User: 208.3 ms, System: 575.5 ms]
  Range (min … max):   215.7 ms … 230.3 ms    3 runs
 
Summary
  deno install ran
    1.76 ± 0.21 times faster than bun install
    4.61 ± 0.16 times faster than pnpm install
   14.44 ± 0.51 times faster than yarn
   20.28 ± 0.69 times faster than npm install

Versions:
Deno: 2.5.6
Bun: 1.3.1+89fa0f343
Pnpm: 10.20.0
Yarn: 1.22.22
Npm: 11.6.2

System: Ubuntu 25.10 - Linux 6.17.5-061705-generic x86_64 x86_64

[github-actions]

Found 3 possible duplicate issues:

1. bun install half a minute slower than npm ci for CryptPad #23037
2. Bun install slower than before #23969
3. bun installing is much slower than npm #21480

This issue will be automatically closed as a duplicate in 3 days.

• If your issue is a duplicate, please close it and 👍 the existing issue instead
• To prevent auto-closure, add a comment or 👎 this comment

🤖 Generated with Claude Code

[nektro]

this is a result of Bun running select postinstall scripts in trusted popular packages by default (you read more about this here) while blocking all others, where deno blocks all by default.

adding an entry for Bun disallowing all scripts we can observe Bun is indeed the fastest as expected:

Benchmark 1: bun install
  Time (mean ± σ):      1.577 s ±  0.029 s    [User: 0.850 s, System: 0.455 s]
  Range (min … max):    1.556 s …  1.609 s    3 runs
 
Benchmark 2: pnpm install
  Time (mean ± σ):      1.641 s ±  0.045 s    [User: 2.106 s, System: 3.528 s]
  Range (min … max):    1.598 s …  1.687 s    3 runs
 
Benchmark 3: yarn
  Time (mean ± σ):      3.146 s ±  0.126 s    [User: 2.797 s, System: 5.045 s]
  Range (min … max):    3.022 s …  3.274 s    3 runs
 
Benchmark 4: npm install --no-scripts
  Time (mean ± σ):      3.323 s ±  0.043 s    [User: 3.475 s, System: 3.682 s]
  Range (min … max):    3.275 s …  3.359 s    3 runs
 
Benchmark 5: deno install
  Time (mean ± σ):     648.6 ms ±  42.2 ms    [User: 153.3 ms, System: 553.8 ms]
  Range (min … max):   602.9 ms … 686.1 ms    3 runs
 
Benchmark 6: bun install --ignore-scripts
  Time (mean ± σ):     449.6 ms ±   6.5 ms    [User: 12.7 ms, System: 269.8 ms]
  Range (min … max):   444.0 ms … 456.8 ms    3 runs
 
Summary
  bun install --ignore-scripts ran
    1.44 ± 0.10 times faster than deno install
    3.51 ± 0.08 times faster than bun install
    3.65 ± 0.11 times faster than pnpm install
    7.00 ± 0.30 times faster than yarn
    7.39 ± 0.14 times faster than npm install --no-scripts

run on a macbook pro m3 max

❯ bun --version
1.3.1
❯ npm --version
11.4.2
❯ deno --version
deno 2.4.5 (stable, release, aarch64-apple-darwin)
❯ pnpm --version
10.19.0
❯ yarn --version
1.22.22

[nektro]

running deno install we can see this called out:

Warning The following packages contained npm lifecycle scripts (preinstall/install/postinstall) that were not executed:
┠─ npm:deasync@0.1.30
┠─ npm:esbuild@0.17.6
┠─ npm:unrs-resolver@1.11.1
┃
┠─ This may cause the packages to not work correctly.
┖─ To run lifecycle scripts, use the `--allow-scripts` flag with `deno install`:

(i didn't include an `--allow-scripts` comparison in my original message since it caused deno to crash)

❯ deno install --allow-scripts
Warning The following packages are deprecated:
┠─ npm:eslint@8.57.1 (This version is no longer supported. Please see https://eslint.org/version-support for other options.)
┠─ npm:@remix-run/eslint-config@1.19.3 (Will no longer be maintained in React Router v7)
┠─ npm:@humanwhocodes/config-array@0.13.0 (Use @eslint/config-array instead)
┠─ npm:@humanwhocodes/object-schema@2.0.3 (Use @eslint/object-schema instead)
┠─ npm:rimraf@3.0.2 (Rimraf versions prior to v4 are no longer supported)
┠─ npm:glob@7.2.3 (Glob versions prior to v9 are no longer supported)
┠─ npm:@npmcli/move-file@1.1.2 (This functionality has been moved to @npmcli/fs)
┠─ npm:inflight@1.0.6 (This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.)
┖─ npm:@types/minimatch@6.0.0 (This is a stub types definition. minimatch provides its own type definitions, so you do not need this installed.)
error: script 'install' in 'deasync@0.1.30' failed with exit code 127
stderr:
/bin/sh: node-gyp: command not found
node-gyp not found! Please upgrade your install of npm! You need at least 1.1.5 (I think) and preferably 1.1.30.

error: script 'postinstall' in 'unrs-resolver@1.11.1' failed with exit code 143
error: script 'postinstall' in 'esbuild@0.17.6' failed with exit code 143
error: script 'postinstall' in 'esbuild@0.21.5' failed with exit code 143
error: failed to run scripts for packages: deasync@0.1.30, unrs-resolver@1.11.1, esbuild@0.17.6, esbuild@0.21.5

Stack backtrace:
   0: std::backtrace::Backtrace::create
   1: anyhow::error::<impl core::convert::From<E> for anyhow::Error>::from
   2: <core::result::Result<T,F> as core::ops::try_trait::FromResidual<core::result::Result<core::convert::Infallible,E>>>::from_residual
   3: deno::tools::pm::cache_deps::cache_top_level_deps::{{closure}}
   4: deno::tools::installer::install_command::{{closure}}
   5: deno::spawn_subcommand::{{closure}}
   6: <deno_unsync::tokio::task::MaskFutureAsSend<F> as core::future::future::Future>::poll
   7: tokio::runtime::task::raw::poll
   8: deno::main
   9: std::sys::backtrace::__rust_begin_short_backtrace
  10: std::rt::lang_start::{{closure}}
  11: std::rt::lang_start_internal
  12: std::rt::lang_start
  13: _main

---

tried upgrading to deno 2.5.6 did not fix it either

❯ deno install --allow-scripts
error: script 'install' in 'deasync@0.1.30' failed with exit code 127
stderr:
/bin/sh: node-gyp: command not found
node-gyp not found! Please upgrade your install of npm! You need at least 1.1.5 (I think) and preferably 1.1.30.

error: script 'postinstall' in 'unrs-resolver@1.11.1' failed with exit code 143
error: script 'postinstall' in 'esbuild@0.17.6' failed with exit code 143
error: script 'postinstall' in 'esbuild@0.21.5' failed with exit code 143
error: failed to run scripts for packages: deasync@0.1.30, unrs-resolver@1.11.1, esbuild@0.17.6, esbuild@0.21.5

Stack backtrace:
   0: std::backtrace::Backtrace::create
   1: anyhow::error::<impl core::convert::From<E> for anyhow::Error>::from
   2: <core::result::Result<T,F> as core::ops::try_trait::FromResidual<core::result::Result<core::convert::Infallible,E>>>::from_residual
   3: deno::tools::pm::cache_deps::cache_top_level_deps::{{closure}}
   4: deno::spawn_subcommand::{{closure}}
   5: <deno_unsync::tokio::task::MaskFutureAsSend<F> as core::future::future::Future>::poll
   6: tokio::runtime::task::raw::poll
   7: deno::main
   8: std::sys::backtrace::__rust_begin_short_backtrace
   9: std::rt::lang_start::{{closure}}
  10: std::rt::lang_start_internal
  11: std::rt::lang_start
  12: _main

[itea-dev]

Ok, I see now. Thanks @nektro