
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
@jcbhmr/exec
Advanced tools
exec(3) for JavaScriptš§ Ergonomic exec(3) for JavaScript
|
š§ Works on Linux, macOS, BSDs, and more
š Does not work on Windows
š¶ Same arguments as node:child_process spawn
npm install @jcbhmr/exec
ā ļø This package requires a Unix-like OS (Linux, macOS, etc.). Windows is not supported. For an isomorphic cross-platform solution, consider using @jcbhmr/cross-exec.
// Unix-like operating systems ONLY.
import exec from "@jcbhmr/exec";
exec("node", ["--version"]);
If you're on Windows you must use WSL to develop this package.
TODOs
process.execve() support, use that instead of FFI. https://github.com/denoland/deno/issues/29017process.execve() support, use that instead of FFI.FAQs
š§ Ergonomic exec(3) for JavaScript
We found that @jcbhmr/exec demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Ā It has 1 open source maintainer collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.