Is shell-quote safe to use?

shell-quote has no known vulnerabilities on the latest version (1.8.3). DepScope rates its health at 75/100 (moderate risk).

What is the latest version of shell-quote?

The latest version of shell-quote is 1.8.3, released 2025-06-02.

Does shell-quote have known vulnerabilities?

No known vulnerabilities on the latest version of shell-quote.

Is shell-quote deprecated?

No, shell-quote is actively maintained. Latest release: 1.8.3 (2025-06-02).

What are alternatives to shell-quote?

Popular alternatives to shell-quote in npm include: semver, ansi-styles, debug, minimatch, brace-expansion.

What license does shell-quote use?

shell-quote is licensed under MIT.

shell-quote

npmv1.8.3

quote and parse shell commands

License MITpermissive29 versions4 maintainers0 deps47,925,723 weekly dl

ssh://[email protected]/ljharb/shell-quote

/ 100

Health

safe to use

[email protected] is safe to use (health: 75/100)

Health breakdown0 – 100

10/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

2.5 KBminified

1.3 KB gzipped

0 direct dependencies

side effects

🌟

TypeScript

7/10typed

Types from @types/shell-quote (DefinitelyTyped)

Quality signals

OSS Criticality

0.83critical

Download trend

stable(+0.6%)

Publish security

npm signed

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/shell-quote