Web lists-archives.com

Bug#886849: ITP: node-puka -- Safely pass strings through shells - Node.js module




Package: wnpp
Severity: wishlist
Owner: Paolo Greppi <paolo.greppi@xxxxxxxxx>

* Package name    : node-puka
  Version         : 1.0.0
  Upstream Author : Ryan Hendrickson <ryan.hendrickson@xxxxxxxxxxxx>
* URL             : https://gitlab.com/rhendric/puka
* License         : Expat
  Programming Lang: JavaScript
  Description     : Safely pass strings through shells - Node.js module

 A Node.js module that provides a simple and platform-agnostic way
 to build shell commands with arguments that pass through your shell
 unaltered and with no unsafe side effects, whether you are running
 on Windows or a Unix-based OS.
 .
 It is useful when launching a child process from Node.js using a shell
 (as with child_process.exec); in that case you have to construct your
 command as a single string instead of using an array of arguments.
 And doing that can be buggy (if not dangerous) if you don't take care
 to quote any arguments correctly for the shell you're targeting, and
 the quoting has to be done differently on Windows and non-Windows shells.
 .
 Node.js is an event-based server-side JavaScript engine.

This is required for node-yarnpkg, see ITP:
https://bugs.debian.org/843021

My intention is to package it within the JavaScript maintainers team.

It will be built with rollup, and requires:
- rollup-plugin-babel, ITP: http://bugs.debian.org/886404
- rollup-plugin-cleanup

The repo will be on salsa:
https://salsa.debian.org/js-team/node-puka

Paolo