shelljs
Repos
8

:shell: Portable Unix shell commands for Node.js

13486
669

Portable Shell Commands for Node

1419
37

An example shelljs-plugin to open a file with its default application

Events

started
Created at 8 hours ago
started
Created at 21 hours ago
issue comment
0.8.5 high severity vuln

Duplicate of issue #945.

Created at 22 hours ago
closed issue
0.8.5 high severity vuln

Node version (or tell us if you're using electron or some other framework):

v. 16.14.0

ShellJS version (the most recent version/Github branch you see the bug on):

0.8.4, 0.8.5

Operating system:

windows

Description of the bug:

npm package usage blocked by vulnerability provider Sonatype OSS Index

https://ossindex.sonatype.org/vulnerability/sonatype-2014-0038?component-type=npm&component-name=shelljs&utm_source=proget&utm_medium=integration&utm_content=22.0.9.2

sonatype_shelljs

Created at 22 hours ago
issue comment
0.8.5 high severity vuln

Hey, thanks for notifying me about this. That security report on sonatype is a false positive and this is not a security vulnerability in ShellJS. Please see the statement I made here and here.

shell.exec() is designed to allow arbitrary command execution. It is the responsibility of the caller to use shell.exec() responsibly and to sanitize user inputs.

Created at 22 hours ago
opened issue
0.8.5 high severity vuln

Node version (or tell us if you're using electron or some other framework):

v. 16.14.0

ShellJS version (the most recent version/Github branch you see the bug on):

0.8.4, 0.8.5

Operating system:

windows

Description of the bug:

npm package usage blocked by vulnerability provider Sonatype OSS Index

https://ossindex.sonatype.org/vulnerability/sonatype-2014-0038?component-type=npm&component-name=shelljs&utm_source=proget&utm_medium=integration&utm_content=22.0.9.2

sonatype_shelljs

Created at 1 day ago
Created at 1 day ago
started
Created at 1 day ago
started
Created at 1 day ago
started
Created at 2 days ago
started
Created at 3 days ago
started
Created at 3 days ago
started
Created at 3 days ago
started
Created at 4 days ago
started
Created at 4 days ago
started
Created at 4 days ago
Created at 5 days ago
started
Created at 5 days ago
issue comment
Preserve timestamps on cp?

If you want --preserve=timestamps, please file a new feature request.

Created at 5 days ago
issue comment
Preserve timestamps on cp?

just noticed that the "-p" option fails under WSL2 when copying to an NTFS destination:

(node:3896) UnhandledPromiseRejectionWarning: ShellJSInternalError: EPERM: operation not permitted, fchown
    at Object.fchownSync (fs.js:1068:3)
    at copyFileSync (/home/michael/<...>/node_modules/shelljs/src/cp.js:78:10)
    at /home/michael/<...>/node_modules/shelljs/src/cp.js:308:7
    at Array.forEach (<anonymous>)
    at Object._cp (/home/michael/<...>/node_modules/shelljs/src/cp.js:253:11)
    at Object.cp (/home/michael/<...>/node_modules/shelljs/src/common.js:411:25)

Since this has to do with ownership, and all I really need is timestamp preservation, I tried --preserve=timestamps but it appears to not be implemented:

cp: option not recognized: -

                            
Created at 6 days ago
started
Created at 6 days ago
started
Created at 1 week ago
started
Created at 1 week ago
started
Created at 1 week ago
started
Created at 1 week ago
started
Created at 1 week ago
started
Created at 1 week ago
started
Created at 1 week ago
started
Created at 1 week ago
started
Created at 1 week ago