Bug#886849: ITP: node-puka -- Safely pass strings through shells - Node.js module
Package: wnpp
Severity: wishlist
Owner: Paolo Greppi <paolo.greppi@libpf.com>
* Package name : node-puka
Version : 1.0.0
Upstream Author : Ryan Hendrickson <ryan.hendrickson@alum.mit.edu>
* URL : https://gitlab.com/rhendric/puka
* License : Expat
Programming Lang: JavaScript
Description : Safely pass strings through shells - Node.js module
A Node.js module that provides a simple and platform-agnostic way
to build shell commands with arguments that pass through your shell
unaltered and with no unsafe side effects, whether you are running
on Windows or a Unix-based OS.
.
It is useful when launching a child process from Node.js using a shell
(as with child_process.exec); in that case you have to construct your
command as a single string instead of using an array of arguments.
And doing that can be buggy (if not dangerous) if you don't take care
to quote any arguments correctly for the shell you're targeting, and
the quoting has to be done differently on Windows and non-Windows shells.
.
Node.js is an event-based server-side JavaScript engine.
This is required for node-yarnpkg, see ITP:
https://bugs.debian.org/843021
My intention is to package it within the JavaScript maintainers team.
It will be built with rollup, and requires:
- rollup-plugin-babel, ITP: http://bugs.debian.org/886404
- rollup-plugin-cleanup
The repo will be on salsa:
https://salsa.debian.org/js-team/node-puka
Paolo
Reply to: