npmjs.org: shescape

simple shell escape library

• Homepage: https://github.com/ericcornelissen/shescape#readme
• Licenses: MPL-2.0
• Latest release: 2.1.12 (published 11 days ago)
• Last Synced: 2026-05-16T04:37:34.600Z (1 day ago)
• Versions: 62
• Dependent Packages: 15
• Dependent Repositories: 28
• Downloads: 80,797 Last month
• Docker Downloads: 24,282,626
• Rankings:
  • Docker downloads count: 0.269%
  • Downloads: 0.982%
  • Dependent packages count: 1.85%
  • Dependent repos count: 2.459%
  • Average: 5.056%
  • Forks count: 7.528%
  • Stargazers count: 17.251%
• Maintainers (1)
  • ericcornelissen
• Advisories:
  • Shescape escape() leaves bracket glob expansion active on Bash, BusyBox, and Dash
  • Withdrawn Advisory: Shescape has possible misidentification of shell due to link chains
  • Shescape has potential environment variable exposure on Windows with CMD
  • Shescape on Windows escaping may be bypassed in threaded context
  • Shescape potential environment variable exposure on Windows with CMD
  • Inefficient Regular Expression Complexity in shescape
  • Shescape vulnerable to insufficient escaping of whitespace
  • Shescape prior to 1.5.8 vulnerable to insufficient escaping of line feeds for CMD
  • Exposure of home directory through shescape on Unix with Bash
  • Null characters not escaped