shell-quote
1.12.0 · 2 Oct 2026MIT96.3M / weekRepositorynpmAtom feed
Your version
1.12.0 is the newest release of 1.x.
In short
5 new1 fixed7 changed1 internal
Security
2 advisories affect 1.7.4; 1.9.0 fixes them
- Criticalshell-quote quote() does not escape newlines in object .op valuesGHSA-w7jw-789q-3m8p · 9 Jun 2026Fixed in 1.8.4
- Highshell-quote: Quadratic-complexity Denial of Service in `parse()` (CWE-407)GHSA-395f-4hp3-45gv · 20 Jul 2026Fixed in 1.9.0
Release note
Merged
Add node_modules to .gitignore
#48
Commits
Fix indentation and whitespace
aaa9d1fAdditional cleanup
397cb62Add
auto-changelog497fca5Add reusable workflows
4763c36Add eslint
6ee1437Rename, add badges
7eb5134Update URLs
67381b6Create FUNDING.yml; add
fundingin package.json8641572Use
npmignoreto autogenerate an npmignore file2e2007aOnly apps should have lockfiles
f97411eUpdate
tape051f608Add
safe-publish-latest18cadf9