"we know the extents they go to protect their competitive advantage"

I don't. What do you mean?

Use bun when it's drop in replacement of npm, never use Bun API itself.