--- title: "Bun cuts 8 MB startup memory, Safari MCP server gets a deeper look" url: https://daily.dev/posts/bun-cuts-8-mb-startup-memory-safari-mcp-server-gets-a-deeper-look-e9zgbdca7 source_url: https://daily.dev/posts/bun-cuts-8-mb-startup-memory-safari-mcp-server-gets-a-deeper-look-e9zgbdca7 type: freeform source: "Web Digest" published: 2026-07-05T04:17:50.669Z updated: 2026-07-05T04:18:07.397Z reading_time: 4 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Bun cuts 8 MB startup memory, Safari MCP server gets a deeper look **[Web Digest](https://daily.dev/sources/webdev_digest)** · 4 min read · 0 upvotes · 0 comments ## Summary Bun's next release trims 8 MB of startup memory on Linux, with larger gains for long-running processes. Apple's Safari MCP server from Technology Preview 247 is getting real scrutiny from the community — the official tool covers the basics, but a community alternative already ships 96 tools with auth and cookie access. The AI-generated web is now a measurable problem: 74% of new pages are AI-written and automated traffic crossed 51% of all web traffic. Authentication patterns are worth revisiting too, with a solid writeup on the BFF pattern and Chrome's Device Bound Session Credentials. ## Content **TLDR:** Bun's next release trims 8 MB of startup memory on Linux, with larger gains for long-running processes. Apple's Safari MCP server from Technology Preview 247 is getting real scrutiny from the community — the official tool covers the basics, but a community alternative already ships 96 tools with auth and cookie access. The AI-generated web is now a measurable problem: 74% of new pages are AI-written and automated traffic crossed 51% of all web traffic. Authentication patterns are worth revisiting too, with a solid writeup on the BFF pattern and Chrome's Device Bound Session Credentials. --- ## Bun's next version uses 8 MB less memory at startup on Linux The upcoming Bun release cuts 8 MB from baseline memory usage on Linux at startup, and the gains are larger for long-running applications. This applies to anything using the runtime or `bun test`, so CI pipelines and containerized workloads both benefit. A Bun v1.4 release post is also reportedly coming Tuesday with an accompanying video. [Read more](https://daily.dev/feed-by-ids?id=jCbwcoQ4L&id=yT6totDyY) ## Safari MCP server: what the official tool covers and where it falls short Apple's official Safari MCP server in Technology Preview 247 exposes 17 WebDriver-based tools — navigation, DOM inspection, element interaction, network capture, console output, and screenshots — all running locally via safaridriver with no data sent to Apple. The gaps are real though: no headless mode, no performance profiling, no Lighthouse audits, and no access to real browser sessions or cookies. A community alternative called safari-mcp fills some of those holes with 96 tools on stable Safari, including auth and network mocking. Worth treating as complementary to Chrome DevTools MCP rather than a replacement. [Read more](https://daily.dev/posts/mQPujp7fU) ## 74% of new web pages are AI-generated, automated traffic now exceeds human traffic Data from Ahrefs, Graphite, Imperva, and NewsGuard puts AI-generated content at 74% of new web pages, with automated traffic crossing 51% of all web traffic. AI content farm sites have grown 60-fold since 2023, and writing projects on Upwork are down 32% year-over-year. WordPress.com formalized this in March 2026 by letting AI agents autonomously publish entire sites via MCP. The model collapse risk — AI trained on AI output producing increasingly degraded results — is the longer-term concern, and content provenance standards like C2PA exist but rely on voluntary adoption. [Read more](https://daily.dev/posts/nh2Qw4AFm) ## Modern authentication patterns: BFF, httpOnly cookies, and Chrome's DBSC A thorough walkthrough of authentication security covers the full progression from localStorage JWT storage through in-memory tokens, httpOnly cookies with CSRF defenses, and OAuth refresh token rotation. The practical recommendation is to store sessions in httpOnly cookies backed by a server-side session store, and for OAuth flows to move all token handling behind a Backend for Frontend so the browser never holds tokens directly. Chrome's Device Bound Session Credentials (DBSC) get a mention as a hardware-level defense against the infostealer/pass-the-cookie threat that's increasingly relevant. React-specific code for collapsing concurrent refresh requests into a single in-flight promise is included. [Read more](https://daily.dev/posts/7ihO9Es5Q) --- ## Also notable - **Opera 1.92 ships Paste Protect to block ClickFix clipboard attacks:** Opera's new Paste Protect feature scans clipboard content for malicious patterns on Windows, macOS, and Linux, blocking ClickFix-style attacks that trick users into pasting and executing malware commands — enabled by default with a developer whitelist option for trusted sites like GitHub. [Read more](https://daily.dev/posts/cQVfnX96q) - **Brave 1.92 adds built-in tab Containers with four default categories:** Brave 1.92 introduces cookie and site data isolation per tab via Containers, shipping four default categories (Personal, Work, Social, School) plus custom and temporary options — force-enableable now via brave://flags for users already on 1.92. [Read more](https://daily.dev/posts/AtcykVHvO) - **Self-hosted LogRocket alternative runs on a $6 VPS using rrweb and pgvector:** Rewind is an open-source session replay platform using rrweb, BullMQ, Redis, PostgreSQL with pgvector for semantic search, and Drizzle ORM — deployable with one Docker Compose command on a $6 VPS as a full LogRocket replacement. [Read more](https://daily.dev/posts/x5p4shDWZ) - **DeepSeek cached input pricing at $0.01/M tokens can undercut Gemini for high-volume structured tasks:** A cost comparison with a full Node.js benchmarking service shows DeepSeek's $0.01/M cached input rate undercutting Gemini 2.0/2.5 Flash for high-volume structured workloads, though Gemini holds advantages at base rates and for complex reasoning — with GDPR/HIPAA compliance flagged as a blocker for DeepSeek in regulated environments. [Read more](https://daily.dev/posts/xYmSrWQg6) ## Similar posts on daily.dev - [Bun v1.3.12](https://daily.dev/posts/bun-v1-3-12-f5ph0rgqu) · Bun · 140 upvotes · 2 comments --- [View this post on daily.dev](https://daily.dev/posts/bun-cuts-8-mb-startup-memory-safari-mcp-server-gets-a-deeper-look-e9zgbdca7)