shell-quote
1.12.0 · 2 Oct 2026MIT96.3M / weekRepositorynpmAtom feed
Upgrading shell-quote From 0.0.0 to 0.1.1
3 releases in betweenevery note read
Reading releases, release notes and advisories…
- 0
- changes to make
- 0
- advisories fixed
- 0
- new
- 3
- fixes
Security
2 advisories still affect 0.1.1
- shell-quote: Quadratic-complexity Denial of Service in `parse()` (CWE-407)high · GHSA-395f-4hp3-45gv
- Potential Command Injection in shell-quotecritical · GHSA-qg8p-v9q4-gh34
Upgrading to 1.9.0 clears them.
Release by release
0.1.1nothing new or fixed in the note
20 other lines we could not sort, mostly version bumps
- 0.1.1
Return empty list when parsing an empty (or whitespace-only) string
1475717 - 0.1.0
Externalize the regex declaration
37d6058 - 0.1.0
Modernize the readme
24106f5 - 0.1.0
Factor out interpolation
1b21b01 - 0.1.0
Half the env tests are working with basic interpolation
5891471 - 0.1.0
Env parse example
5757c42 - 0.1.0
Denormalize the interpolate logic to make room for special cases
c669d2e - 0.1.0
Cleaner implementation recursing on the double quote case
adae66f - 0.1.0
One test was wrong, checking for pre escapes
42b5f83 - 0.1.0
Finally passing all the tests
efa4084
4 internal lines (docs, tests, tooling) left out.