Package: node-shell-quote severity: serious forwarded: https://github.com/substack/node-shell-quote/issues/31 couple of open issues that seem reasonably serious for a package that appears to be intended for sanitising user input before passing it on to the shell: