I really wish people would mention their stack when they have these curl install scripts. I'd rather use a real package manager, but I'm not totally against installing a compiled binary this way. I am, 100%, not going to install some Java/Type-script nightmare like this though. How is it resolving the dependencies? Is it installing some version of node, bun... on my machine? How's that working with other versions I have installed?

Related: please don't write command line tools in non-compiled languages! Don't make the runtime your user's problem.

Agree. If you really want to know what's used here: probably uses bun single-file executables[0] so shouldn't clash with anything else on your system.

[0] https://bun.com/docs/bundler/executables

I know where you're coming from. I've been worried about all the supply chain attacks on npm too. And I'm far from a security expert. However, if you're okay with installing binary packages via `curl somesite.com | sh` I don't think you are in a better position with regards to security.