Is shellwords safe to use?

shellwords has no known vulnerabilities on the latest version (1.1.1). DepScope rates its health at 52/100 (high risk).

What is the latest version of shellwords?

The latest version of shellwords is 1.1.1, released 2025-07-11.

Does shellwords have known vulnerabilities?

No known vulnerabilities on the latest version of shellwords.

Is shellwords deprecated?

No, shellwords is actively maintained. Latest release: 1.1.1 (2025-07-11).

What are alternatives to shellwords?

Popular alternatives to shellwords in npm include: semver, ansi-styles, minimatch, debug, brace-expansion.

What license does shellwords use?

shellwords is licensed under MIT.

shellwords

npmv1.1.1

Manipulate strings according to the word parsing rules of the UNIX Bourne shell.

License MITpermissive8 versions1 maintainers0 deps

git://github.com/jimmycuadra/shellwords

/ 100

Health

safe to use

[email protected] is safe to use (health: 52/100)

Health breakdown0 – 100

10/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/shellwords