Vercel and Cloudflare are fighting…about bash?

A public dispute erupted between Vercel and Cloudflare after Cloudflare's Sunil Pai forked Vercel CTO Malte Ubl's 'just-bash' package — a TypeScript-based virtual Bash emulator designed for AI agents — into the official Cloudflare GitHub org without prior communication. The fork stripped security warnings, beta disclaimers, and Node.js-specific safety layers, which alarmed Vercel given the different runtime architectures (Vercel runs real Docker/Node instances; Cloudflare uses V8 isolates via workerd). The post explains why just-bash exists and why its security model differs between the two platforms, then argues the fork was a well-intentioned but poorly executed experiment by Sunil, likely vibe-coded in the background. The drama escalated publicly before Malte deleted his post and issued an apology to Sunil. The author concludes both sides should assume good faith and send a DM before going public.