Escaping

[sindresorhus]

I discovered this lib https://github.com/jimmycuadra/shellwords today which escapes commands. I don't think exec() escapes its input so this could be useful.

Is there any downsides to just escaping by default? Or should escaping lib just be mentioned in the readme?

@jimmycuadra do you know?

[jimmycuadra]

Not sure what the context is here, but I'm not sure it's desirable to escape all strings you would pass to exec. Try it with some commands that have quotes in them and see if they work for you.