{"categories":[{"label":"Utilities","url":"https://skillfed.io/packages/category/utilities/4"}],"enrichment":{"capability":"Provides a `quote()` function that shell-escapes Python strings to safely use them as tokens in shell commands, backporting `shlex.quote()` to older Python versions.","skillfed_tags":["shell-safety","legacy-python"],"use_cases":["Building shell commands dynamically from untrusted or user-supplied filenames or arguments in Python 2 or early Python 3 codebases.","Preventing shell injection when passing arguments to subprocess calls that invoke a shell.","Safely constructing remote SSH commands by quoting local arguments before embedding them in the remote command string.","Escaping special characters in filenames or paths before passing them to shell utilities via Python scripts on legacy Python versions."],"what_it_does":"shellescape is a single-function library that wraps Python strings in shell-safe quoting so they can be safely embedded in shell command lines. It backports `shlex.quote()` to Python 2.x and Python versions before 3.3, making it accessible to projects that need to support those legacy runtimes. The function prevents shell injection attacks by properly escaping metacharacters\u2014turning a dangerous string like `somefile; rm -rf ~` into a quoted token that a shell will treat as literal text rather than as multiple commands.\n\nThe package has zero runtime dependencies and installs as a pure Python wheel. It is marked Production/Stable but has been abandoned since 2020; the last commit was in 2021-04-29. No known security vulnerabilities have been reported. With monthly downloads in the top tier, it remains widely used, though most modern projects should consider whether they still need to support the Python versions this backport targets.","worth_installing":"Yes, if you are maintaining Python 2 or Python 3 < 3.3 code that needs to safely escape shell arguments. For modern projects targeting Python 3.3 and later, use the built-in `shlex.quote()` instead. The package is stable and has no known vulnerabilities, but its abandonment means it will not receive updates if shell-escaping semantics change."},"id":"shellescape","links":{"html":"https://skillfed.io/packages/shellescape","md":"https://skillfed.io/packages/shellescape.md","pypi":"https://pypi.org/project/shellescape/"},"maintenance":{"status":"abandoned"},"meta":{"latest_release":"2020-01-25","license_spdx":null,"license_treatment":"permissive","name":"shellescape","python_support":"unspecified","summary":"Shell escape a string to safely use it as a token in a shell command (backport of cPython shlex.quote for Python versions 2.x & < 3.3)"},"popularity":{"monthly_downloads":1420056,"position":3926,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"3.8.1"}