Bun vs Auth0
Side-by-side trajectory, velocity, and editorial themes.
Bun is rewriting its core from Zig to Rust while shipping built-in APIs at a monthly clip.
Bun ships a substantial point release roughly monthly, each widening Node.js compatibility and folding more capability into the runtime itself — image processing, Markdown parsing, cron, archives, a headless WebView, HTTP/2 and HTTP/3 clients. Performance work is constant, with double-digit speedups landing release over release. In July the team disclosed it is rewriting Bun's implementation from Zig to Rust.
Two arcs run in parallel: keep absorbing what developers reach for third-party packages to do, so the runtime is batteries-included, and re-lay the foundation in Rust for a larger contributor pool and easier maintenance. The near-term feature cadence has not slowed, which suggests the rewrite is incremental rather than a hard fork.
Expect continued monthly 1.3.x releases centered on Node compatibility and built-in APIs, with the Rust migration surfaced through engineering write-ups before it changes anything user-facing.
Auth0 pushes past login into full identity lifecycle: SCIM both ways, granular token control
Auth0's recent releases cluster tightly around enterprise identity lifecycle rather than authentication itself. Inbound SCIM groups went GA, outbound SCIM provisioning arrived via Event Streams, and group-to-role mapping now spans tenant and organization scope. In parallel it is hardening session primitives — refresh token metadata (GA) and bulk refresh-token revocation — and modernizing the dashboard IA.
The direction is a lifecycle and governance platform for B2B: provisioning users and groups in both directions, self-service enterprise configuration, and finer control over tokens and sessions. This is Auth0 competing on the same enterprise provisioning ground as Okta and WorkOS, moving the value from 'sign users in' to 'manage their entire access lifecycle.'
Expect more Event Streams destinations and provisioning templates, broader GA of the Early Access refresh-token and session controls, and continued dashboard consolidation as the IA refresh exits beta.
See more alternatives to Bun →
See more alternatives to Auth0 →