Gathering detailed insights and metrics for shelljs
Gathering detailed insights and metrics for shelljs
Gathering detailed insights and metrics for shelljs
Gathering detailed insights and metrics for shelljs
🐚 Portable Unix shell commands for Node.js
npm install shelljs
Typescript
Module System
Min. Node Version
Node Version
NPM Version
86.4
Supply Chain
98.8
Quality
78.8
Maintenance
100
Vulnerability
98.2
License
JavaScript (99.99%)
CoffeeScript (0.01%)
Total Downloads
2,475,519,155
Last Day
679,524
Last Week
5,979,371
Last Month
32,986,908
Last Year
398,278,943
14,275 Stars
837 Commits
734 Forks
175 Watching
20 Branches
87 Contributors
Minified
Minified + Gzipped
Latest Version
0.8.5
Package Id
shelljs@0.8.5
Unpacked Size
207.07 kB
Size
56.14 kB
File Count
42
NPM Version
6.14.4
Node Version
10.19.0
Cumulative downloads
Total Downloads
Last day
-50.9%
679,524
Compared to previous day
Last week
-19.1%
5,979,371
Compared to previous week
Last month
-10.8%
32,986,908
Compared to previous month
Last year
-4.7%
398,278,943
Compared to previous year
ShellJS is a portable (Windows/Linux/OS X) implementation of Unix shell commands on top of the Node.js API. You can use it to eliminate your shell script's dependency on Unix while still keeping its familiar and powerful commands. You can also install it globally so you can run it from outside Node projects - say goodbye to those gnarly Bash scripts!
ShellJS is proudly tested on every node release since v4
!
The project is unit-tested and battle-tested in projects like:
If you have feedback, suggestions, or need help, feel free to post in our issue tracker.
Think ShellJS is cool? Check out some related projects in our Wiki page!
Upgrading from an older version? Check out our breaking changes page to see what changes to watch out for while upgrading.
If you just want cross platform UNIX commands, checkout our new project
shelljs/shx, a utility to expose shelljs
to
the command line.
For example:
$ shx mkdir -p foo
$ shx touch foo/bar.txt
$ shx rm -rf foo
ShellJS now supports third-party plugins! You can learn more about using plugins and writing your own ShellJS commands in the wiki.
For documentation on all the latest features, check out our README. To read docs that are consistent with the latest release, check out the npm page or shelljs.org.
Via npm:
1$ npm install [-g] shelljs
1var shell = require('shelljs'); 2 3if (!shell.which('git')) { 4 shell.echo('Sorry, this script requires git'); 5 shell.exit(1); 6} 7 8// Copy files to release dir 9shell.rm('-rf', 'out/Release'); 10shell.cp('-R', 'stuff/', 'out/Release'); 11 12// Replace macros in each .js file 13shell.cd('lib'); 14shell.ls('*.js').forEach(function (file) { 15 shell.sed('-i', 'BUILD_VERSION', 'v0.1.2', file); 16 shell.sed('-i', /^.*REMOVE_THIS_LINE.*$/, '', file); 17 shell.sed('-i', /.*REPLACE_LINE_WITH_MACRO.*\n/, shell.cat('macro.js'), file); 18}); 19shell.cd('..'); 20 21// Run external tool synchronously 22if (shell.exec('git commit -am "Auto-commit"').code !== 0) { 23 shell.echo('Error: Git commit failed'); 24 shell.exit(1); 25}
If you need to pass a parameter that looks like an option, you can do so like:
1shell.grep('--', '-v', 'path/to/file'); // Search for "-v", no grep options 2 3shell.cp('-R', '-dir', 'outdir'); // If already using an option, you're done
We no longer recommend using a global-import for ShellJS (i.e.
require('shelljs/global')
). While still supported for convenience, this
pollutes the global namespace, and should therefore only be used with caution.
Instead, we recommend a local import (standard for npm packages):
1var shell = require('shelljs'); 2shell.echo('hello world');
All commands run synchronously, unless otherwise stated.
All commands accept standard bash globbing characters (*
, ?
, etc.),
compatible with the node glob
module.
For less-commonly used commands and features, please check out our wiki page.
Available options:
-n
: number all output linesExamples:
1var str = cat('file*.txt'); 2var str = cat('file1', 'file2'); 3var str = cat(['file1', 'file2']); // same as above
Returns a string containing the given file, or a concatenated string containing the files if more than one file is given (a new line character is introduced between each file).
Changes to directory dir
for the duration of the script. Changes to home
directory if no argument is supplied.
Available options:
-v
: output a diagnostic for every file processed-c
: like verbose, but report only when a change is made-R
: change files and directories recursivelyExamples:
1chmod(755, '/Users/brandon'); 2chmod('755', '/Users/brandon'); // same as above 3chmod('u+x', '/Users/brandon'); 4chmod('-R', 'a-w', '/Users/brandon');
Alters the permissions of a file or directory by either specifying the absolute permissions in octal form or expressing the changes in symbols. This command tries to mimic the POSIX behavior as much as possible. Notable exceptions:
a-r
and -r
are identical. No consideration is
given to the umask
.Available options:
-f
: force (default behavior)-n
: no-clobber-u
: only copy if source
is newer than dest
-r
, -R
: recursive-L
: follow symlinks-P
: don't follow symlinksExamples:
1cp('file1', 'dir1'); 2cp('-R', 'path/to/dir/', '~/newCopy/'); 3cp('-Rf', '/tmp/*', '/usr/local/*', '/home/tmp'); 4cp('-Rf', ['/tmp/*', '/usr/local/*'], '/home/tmp'); // same as above
Copies files.
Available options:
-n
: Suppresses the normal change of directory when adding directories to the stack, so that only the stack is manipulated.-q
: Supresses output to the console.Arguments:
dir
: Sets the current working directory to the top of the stack, then executes the equivalent of cd dir
.+N
: Brings the Nth directory (counting from the left of the list printed by dirs, starting with zero) to the top of the list by rotating the stack.-N
: Brings the Nth directory (counting from the right of the list printed by dirs, starting with zero) to the top of the list by rotating the stack.Examples:
1// process.cwd() === '/usr' 2pushd('/etc'); // Returns /etc /usr 3pushd('+1'); // Returns /usr /etc
Save the current directory on the top of the directory stack and then cd
to dir
. With no arguments, pushd
exchanges the top two directories. Returns an array of paths in the stack.
Available options:
-n
: Suppress the normal directory change when removing directories from the stack, so that only the stack is manipulated.-q
: Supresses output to the console.Arguments:
+N
: Removes the Nth directory (counting from the left of the list printed by dirs), starting with zero.-N
: Removes the Nth directory (counting from the right of the list printed by dirs), starting with zero.Examples:
1echo(process.cwd()); // '/usr' 2pushd('/etc'); // '/etc /usr' 3echo(process.cwd()); // '/etc' 4popd(); // '/usr' 5echo(process.cwd()); // '/usr'
When no arguments are given, popd
removes the top directory from the stack and performs a cd
to the new top directory. The elements are numbered from 0, starting at the first directory listed with dirs (i.e., popd
is equivalent to popd +0
). Returns an array of paths in the stack.
Available options:
-c
: Clears the directory stack by deleting all of the elements.-q
: Supresses output to the console.Arguments:
+N
: Displays the Nth directory (counting from the left of the list printed by dirs when invoked without options), starting with zero.-N
: Displays the Nth directory (counting from the right of the list printed by dirs when invoked without options), starting with zero.Display the list of currently remembered directories. Returns an array of paths in the stack, or a single path if +N
or -N
was specified.
See also: pushd
, popd
Available options:
-e
: interpret backslash escapes (default)-n
: remove trailing newline from outputExamples:
1echo('hello world'); 2var str = echo('hello world'); 3echo('-n', 'no newline at end');
Prints string
to stdout, and returns string with additional utility methods
like .to()
.
Available options:
async
: Asynchronous execution. If a callback is provided, it will be set to
true
, regardless of the passed value (default: false
).silent
: Do not echo program output to console (default: false
).encoding
: Character encoding to use. Affects the values returned to stdout and stderr, and
what is written to stdout and stderr when not in silent mode (default: 'utf8'
).child_process.exec()
Examples:
1var version = exec('node --version', {silent:true}).stdout; 2 3var child = exec('some_long_running_process', {async:true}); 4child.stdout.on('data', function(data) { 5 /* ... do something with data ... */ 6}); 7 8exec('some_long_running_process', function(code, stdout, stderr) { 9 console.log('Exit code:', code); 10 console.log('Program output:', stdout); 11 console.log('Program stderr:', stderr); 12});
Executes the given command
synchronously, unless otherwise specified. When in synchronous
mode, this returns a ShellString
(compatible with ShellJS v0.6.x, which returns an object
of the form { code:..., stdout:... , stderr:... }
). Otherwise, this returns the child process
object, and the callback
receives the arguments (code, stdout, stderr)
.
Not seeing the behavior you want? exec()
runs everything through sh
by default (or cmd.exe
on Windows), which differs from bash
. If you
need bash-specific behavior, try out the {shell: 'path/to/bash'}
option.
Examples:
1find('src', 'lib'); 2find(['src', 'lib']); // same as above 3find('.').filter(function(file) { return file.match(/\.js$/); });
Returns array of all files (however deep) in the given paths.
The main difference from ls('-R', path)
is that the resulting file names
include the base directories (e.g., lib/resources/file1
instead of just file1
).
Available options:
-v
: Invert regex_filter
(only print non-matching lines).-l
: Print only filenames of matching files.-i
: Ignore case.Examples:
1grep('-v', 'GLOBAL_VARIABLE', '*.js'); 2grep('GLOBAL_VARIABLE', '*.js');
Reads input string from given files and returns a string containing all lines of the
file that match the given regex_filter
.
Available options:
-n <num>
: Show the first <num>
lines of the filesExamples:
1var str = head({'-n': 1}, 'file*.txt'); 2var str = head('file1', 'file2'); 3var str = head(['file1', 'file2']); // same as above
Read the start of a file.
Available options:
-s
: symlink-f
: forceExamples:
1ln('file', 'newlink'); 2ln('-sf', 'file', 'existing');
Links source
to dest
. Use -f
to force the link, should dest
already exist.
Available options:
-R
: recursive-A
: all files (include files beginning with .
, except for .
and ..
)-L
: follow symlinks-d
: list directories themselves, not their contents-l
: list objects representing each file, each with fields containing ls -l
output fields. See
fs.Stats
for more infoExamples:
1ls('projs/*.js'); 2ls('-R', '/users/me', '/tmp'); 3ls('-R', ['/users/me', '/tmp']); // same as above 4ls('-l', 'file.txt'); // { name: 'file.txt', mode: 33188, nlink: 1, ...}
Returns array of files in the given path
, or files in
the current directory if no path
is provided.
Available options:
-p
: full path (and create intermediate directories, if necessary)Examples:
1mkdir('-p', '/tmp/a/b/c/d', '/tmp/e/f/g'); 2mkdir('-p', ['/tmp/a/b/c/d', '/tmp/e/f/g']); // same as above
Creates directories.
Available options:
-f
: force (default behavior)-n
: no-clobberExamples:
1mv('-n', 'file', 'dir/'); 2mv('file1', 'file2', 'dir/'); 3mv(['file1', 'file2'], 'dir/'); // same as above
Moves source
file(s) to dest
.
Returns the current directory.
Available options:
-f
: force-r, -R
: recursiveExamples:
1rm('-rf', '/tmp/*'); 2rm('some_file.txt', 'another_file.txt'); 3rm(['some_file.txt', 'another_file.txt']); // same as above
Removes files.
Available options:
-i
: Replace contents of file
in-place. Note that no backups will be created!Examples:
1sed('-i', 'PROGRAM_VERSION', 'v0.1.3', 'source.js'); 2sed(/.*DELETE_THIS_LINE.*\n/, '', 'source.js');
Reads an input string from file
s, and performs a JavaScript replace()
on the input
using the given search_regex
and replacement
string or function. Returns the new string after replacement.
Note:
Like unix sed
, ShellJS sed
supports capture groups. Capture groups are specified
using the $n
syntax:
1sed(/(\w+)\s(\w+)/, '$2, $1', 'file.txt');
Available options:
+/-e
: exit upon error (config.fatal
)+/-v
: verbose: show all commands (config.verbose
)+/-f
: disable filename expansion (globbing)Examples:
1set('-e'); // exit upon first error 2set('+e'); // this undoes a "set('-e')"
Sets global configuration variables.
Available options:
-r
: Reverse the results-n
: Compare according to numerical valueExamples:
1sort('foo.txt', 'bar.txt'); 2sort('-r', 'foo.txt');
Return the contents of the file
s, sorted line-by-line. Sorting multiple
files mixes their content (just as unix sort
does).
Available options:
-n <num>
: Show the last <num>
lines of file
sExamples:
1var str = tail({'-n': 1}, 'file*.txt'); 2var str = tail('file1', 'file2'); 3var str = tail(['file1', 'file2']); // same as above
Read the end of a file
.
Examples:
1var tmp = tempdir(); // "/tmp" for most *nix platforms
Searches and returns string containing a writeable, platform-dependent temporary directory. Follows Python's tempfile algorithm.
Available expression primaries:
'-b', 'path'
: true if path is a block device'-c', 'path'
: true if path is a character device'-d', 'path'
: true if path is a directory'-e', 'path'
: true if path exists'-f', 'path'
: true if path is a regular file'-L', 'path'
: true if path is a symbolic link'-p', 'path'
: true if path is a pipe (FIFO)'-S', 'path'
: true if path is a socketExamples:
1if (test('-d', path)) { /* do something with dir */ }; 2if (!test('-f', path)) continue; // skip if it's a regular file
Evaluates expression
using the available primaries and returns corresponding value.
Examples:
1cat('input.txt').to('output.txt');
Analogous to the redirection operator >
in Unix, but works with
ShellStrings
(such as those returned by cat
, grep
, etc.). Like Unix
redirections, to()
will overwrite any existing file!
Examples:
1cat('input.txt').toEnd('output.txt');
Analogous to the redirect-and-append operator >>
in Unix, but works with
ShellStrings
(such as those returned by cat
, grep
, etc.).
Available options:
-a
: Change only the access time-c
: Do not create any files-m
: Change only the modification time-d DATE
: Parse DATE
and use it instead of current time-r FILE
: Use FILE
's times instead of current timeExamples:
1touch('source.js'); 2touch('-c', '/path/to/some/dir/source.js'); 3touch({ '-r': FILE }, '/path/to/some/dir/source.js');
Update the access and modification times of each FILE
to the current time.
A FILE
argument that does not exist is created empty, unless -c
is supplied.
This is a partial implementation of touch(1)
.
Available options:
-i
: Ignore case while comparing-c
: Prefix lines by the number of occurrences-d
: Only print duplicate lines, one for each group of identical linesExamples:
1uniq('foo.txt'); 2uniq('-i', 'foo.txt'); 3uniq('-cd', 'foo.txt', 'bar.txt');
Filter adjacent matching lines from input
.
Examples:
1var nodeExec = which('node');
Searches for command
in the system's PATH
. On Windows, this uses the
PATHEXT
variable to append the extension if it's not already executable.
Returns string containing the absolute path to command
.
Exits the current process with the given exit code
.
Tests if error occurred in the last command. Returns a truthy value if an error returned, or a falsy value otherwise.
Note: do not rely on the
return value to be an error message. If you need the last error message, use
the .stderr
attribute from the last command's return value instead.
Examples:
1var foo = ShellString('hello world');
Turns a regular string into a string-like object similar to what each
command returns. This has special methods, like .to()
and .toEnd()
.
Object containing environment variables (both getter and setter). Shortcut
to process.env
.
Examples:
1grep('foo', 'file1.txt', 'file2.txt').sed(/o/g, 'a').to('output.txt'); 2echo('files with o\'s in the name:\n' + ls().grep('o')); 3cat('test.js').exec('node'); // pipe to exec() call
Commands can send their output to another command in a pipe-like fashion.
sed
, grep
, cat
, exec
, to
, and toEnd
can appear on the right-hand
side of a pipe. Pipes can be chained.
Example:
1var sh = require('shelljs'); 2var silentState = sh.config.silent; // save old silent state 3sh.config.silent = true; 4/* ... */ 5sh.config.silent = silentState; // restore old silent state
Suppresses all command output if true
, except for echo()
calls.
Default is false
.
Example:
1require('shelljs/global'); 2config.fatal = true; // or set('-e'); 3cp('this_file_does_not_exist', '/dev/null'); // throws Error here 4/* more commands... */
If true
, the script will throw a Javascript error when any shell.js
command encounters an error. Default is false
. This is analogous to
Bash's set -e
.
Example:
1config.verbose = true; // or set('-v'); 2cd('dir/'); 3rm('-rf', 'foo.txt', 'bar.txt'); 4exec('echo hello');
Will print each command as follows:
cd dir/
rm -rf foo.txt bar.txt
exec echo hello
Example:
1config.globOptions = {nodir: true};
Use this value for calls to glob.sync()
instead of the default options.
Example:
1var shell = require('shelljs'); 2// Make changes to shell.config, and do stuff... 3/* ... */ 4shell.config.reset(); // reset to original state 5// Do more stuff, but with original settings 6/* ... */
Reset shell.config
to the defaults:
1{ 2 fatal: false, 3 globOptions: {}, 4 maxdepth: 255, 5 noglob: false, 6 silent: false, 7 verbose: false, 8}
Nate Fischer | Brandon Freitag |
Stable Version
1
7.1/10
Summary
Improper Privilege Management in shelljs
Affected Versions
< 0.8.5
Patched Versions
0.8.5
1
0/10
Summary
Improper Privilege Management in shelljs
Affected Versions
< 0.8.5
Patched Versions
0.8.5
Reason
security policy file detected
Details
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
0 existing vulnerabilities detected
Reason
license file detected
Details
Reason
0 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 3
Reason
Found 6/30 approved changesets -- score normalized to 2
Reason
detected GitHub workflow tokens with excessive permissions
Details
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
Score
Last Scanned on 2024-12-16
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More