Disclaimer

CLI utilities can be incredibly dangerous.

• stdin, os.exec, and shells are easy to interface and therefore exploit.
• Having the ability to issue os.exec or interface stdin always makes the application dangerous.
• Protecting against harmful bugs or malicious actors isn't difficult if the application's logic is handled correctly, and precautions are made to disable REPLs (but allowing SIGKILL, SIGSTOP, and other user-controlled signals).

A language's packaging utility (npx, pep, cargo, etc.) extends some amazing capabilities, but should never have the opportunity to be taken advantage of (Development Supply-Chain Attacks).

Ensure due diligence in writing cli applications, regardless of involvements with the following project(s).