shell-quote
1.12.0 · 2 Oct 2026MIT96.3M / weekRepositorynpmAtom feed
1.12.0 is the newest release of 1.x.
In short
17 changed1 internal
Security
2 advisories affect 1.0.0; 1.9.0 fixes them
- CriticalPotential Command Injection in shell-quoteGHSA-qg8p-v9q4-gh34 · 18 Feb 2019Fixed in 1.6.1
- Highshell-quote: Quadratic-complexity Denial of Service in `parse()` (CWE-407)GHSA-395f-4hp3-45gv · 20 Jul 2026Fixed in 1.9.0
Release note
Commits
Document ops, op example
a6381e6Some more passing double-char op tests
fbc6e5cLabeled regex states
8c008b2Refactored the chunker regex into a string
0331c7fSimple failing double-char op test
e51fa90Failing expanded single-op tests for ; and ()
710bb24Now passing all the single-char op tests
e3e9ac1Using the control ops directly from the docs
f535987First part of op parsing works
e6f9199Failing redirect tests
cb94c10Another double-char op test just to be sure
5cf1bf21.0.0 for ops
17a40edAdding redirect <> ops to CONTROL makes the tests pass
48b1eb9double-char op test now passing
3998b0fUsing the meta chars directly from the docs
b009ef6The spec says tabs are also allowed
2adb373Op test completely passing
20a0147