-
Notifications
You must be signed in to change notification settings - Fork 17
Open
Description
Running npx jsr publish --dry-run
emits deprecation warning as below in Node.js v24.5.0:
Downloading JSR release binary...
[00:02] [#################################################>] 36.5 MiB/37.0 MiB
(node:1323) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.
(Use `node --trace-deprecation ...` to show where the warning was created)
Probably the warning comes from here:
Line 244 in 1546c7f
shell: true, |
Metadata
Metadata
Assignees
Labels
No labels