DRAFT: Add Bun Detector

[zahidblackduck]

JIRA Ticket

IDETECT-5295

Description

This pull request adds two new detectors for the Bun package manager support in Detect. Bun is an all-in-one JavaScript runtime, package manager, bundler, and test runner designed as a fast, drop-in replacement for Node.js and npm.

Bun Lockfile Detector (HIGH accuracy, buildless) parses bun.lock. The JSONC-format lockfile introduced in Bun 1.2 (January 2025) as the standard for all current Bun projects. No executable is required.

Bun CLI Detector (LOW accuracy, build) runs bun pm list --all as a best-effort fallback when bun.lock is absent. It targets projects that have adopted Bun as their runtime but retain a lockfile from a previous npm, yarn, or pnpm setup. Bun auto-migrates these formats to produce the full dependency tree without requiring node_modules/ to be populated.

The two detectors are registered under a single BUN detector type and yield to LERNA and RUSH, consistent with the existing npm and yarn detectors.

Requirements

Bun Lockfile Detector

• bun.lock present (requires Bun 1.2+)

Bun CLI Detector

• bun executable on PATH (or specified via detect.bun.path)
• One of package-lock.json, yarn.lock, or pnpm-lock.yaml present

New Detect Properties

detect.bun.path - Path to the bun executable. Optional; used only by the Bun CLI Detector when bun is not on PATH.