shell-quote
1.12.0 · 2 Oct 2026MIT96.3M / weekRepositorynpmAtom feed
Where each line stands
Plan an upgrade- 1.x1.12.0Safe from 1.11.0Latest line
- 0.1.x and older0.1.14 open advisories, worst critical · last release Apr 2013, no longer updatedTo 1.12.0
Latest releases
All 34 releases1.12.0
2 Oct 2026parse: support here-documents (<<)#31parse: support tab-stripping here-documents (<<-)dbfac37parse: support output process substitution (>()2053315
Fixed
parse: support here-documents (<<)#31
Commits
parse: support tab-stripping here-documents (<<-)dbfac37parse: support output process substitution (>()2053315parse: support thecasetest-next terminator (;;&)7d688b9parse: support thecasefall-through terminator (;&)f27010eparse: support redirecting output despitenoclobber(>|)b78d19cparse: support opening a file for reading and writing (<>)21cc333parse: support redirecting stdout and stderr (&>)6ad6cd2parse: support appending stdout and stderr (&>>)90cde9cUpdate
@ljharb/eslint-config3a7b4ae
1.11.0
29 Sep 2026quote: drop a replace that can never match in the single-quote branch#15parse: support bash ANSI-C quoting ($'...')#32quote: reject line terminators in tokens after acomment6002b2e
Fixed
quote: drop a replace that can never match in the single-quote branch#15parse: support bash ANSI-C quoting ($'...')#32
Commits
quote: reject line terminators in tokens after acomment6002b2eparse: preserve text after special shell parameters81b08a5parse: an escaped backslash does not escape the character after itd708019quote: preserve!in arguments that also contain'ad39927parse: treat$_nameas a variable name, not$_followed by text28f88cdquote: preserve empty glob patterns35c9b97quote: escape~in glob patterns to prevent shell tilde-expansion239d49cUpdate
@ljharb/eslint-config,auto-changelog,eslint,evalmdb1e406eNpmignore some files
ebfc308Add permissions
3429b0dSet least-privilege
cache-mode36f2394Update
eslint6de9a41
1.10.0
10 Jul 2026parse: add opt-insplitUnquotedoption for shell field-splitting of unquoted expansions#1parse: match nested${...}braces so nested parameter expansion is consumed as one substitutionc0842c8Remove the space in js code fences so evalmd evaluates them
2116fa3
Merged
parse: add opt-insplitUnquotedoption for shell field-splitting of unquoted expansions#1
Commits
parse: match nested${...}braces so nested parameter expansion is consumed as one substitutionc0842c8Remove the space in js code fences so evalmd evaluates them
2116fa3Document that
quoteoutputs POSIX quoting, notcmd.exe/PowerShell100e96eDocument
parse's supported parameter-expansion subsete1c75cdparse: a backslash inside single quotes must not escape the closing quote5d460a3Fix stale example outputs
2de86f5quote: use output verbatim; do not re-quote it (#11)1b36468parse: fix swappedSINGLE_QUOTE/DOUBLE_QUOTEvariable names801af5cFix an error TS v6 ignores but v7 fails on
59bbf8bUpdate
@arethetypeswrong/cli,evalmda04d475Update
@arethetypeswrong/ci,eslintd390f9a
Dependency tracking · free for 3 projects
Know when your own dependencies move
shell-quote had 3 security advisories in the last 12 months. inlinr emails you the day one touches a project of yours, with the version that fixes it.
Advisories reach you
An email when a critical or high advisory affects a project, before the next install.
Upgrades checked first
Peer ranges, Node, ESM-only and types changes read before you bump.
Only what matters
Majors and breaking notes stay; patches and sibling bumps fold into one line.
Reading releases, release notes and advisories…
Registry facts last checked 4 Nov 2026. Releases and advisories last read 4 Nov 2026.