🐚 Portable Unix shell commands for Node.js
Installations
npm install shelljs
Developer Guide
Typescript
No
Module System
CommonJS
Min. Node Version
>=4
Node Version
10.19.0
NPM Version
6.14.4
Score
86.4
Supply Chain
98.8
Quality
78.8
Maintenance
100
Vulnerability
98.2
License
Releases
Contributors
Unable to fetch Contributors
Languages
JavaScript (99.99%)
CoffeeScript (0.01%)
Developer
Download Statistics
Total Downloads
2,475,519,155
Last Day
679,524
Last Week
5,979,371
Last Month
32,986,908
Last Year
398,278,943
GitHub Statistics
14,275 Stars
837 Commits
734 Forks
175 Watching
20 Branches
87 Contributors
Bundle Size
63.44 kB
Minified
20.46 kB
Minified + Gzipped
Package Meta Information
Latest Version
0.8.5
Package Id
shelljs@0.8.5
Unpacked Size
207.07 kB
Size
56.14 kB
File Count
42
NPM Version
6.14.4
Node Version
10.19.0
Total Downloads
Cumulative downloads
Total Downloads
2,475,519,155
Last day
-50.9%
679,524
Compared to previous day
Last week
-19.1%
5,979,371
Compared to previous week
Last month
-10.8%
32,986,908
Compared to previous month
Last year
-4.7%
398,278,943
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
ShellJS - Unix shell commands for Node.js
ShellJS is a portable (Windows/Linux/OS X) implementation of Unix shell commands on top of the Node.js API. You can use it to eliminate your shell script's dependency on Unix while still keeping its familiar and powerful commands. You can also install it globally so you can run it from outside Node projects - say goodbye to those gnarly Bash scripts!
ShellJS is proudly tested on every node release since v4
!
The project is unit-tested and battle-tested in projects like:
- Firebug - Firefox's infamous debugger
- JSHint & ESLint - popular JavaScript linters
- Zepto - jQuery-compatible JavaScript library for modern browsers
- Yeoman - Web application stack and development tool
- Deployd.com - Open source PaaS for quick API backend generation
- And many more.
If you have feedback, suggestions, or need help, feel free to post in our issue tracker.
Think ShellJS is cool? Check out some related projects in our Wiki page!
Upgrading from an older version? Check out our breaking changes page to see what changes to watch out for while upgrading.
Command line use
If you just want cross platform UNIX commands, checkout our new project
shelljs/shx, a utility to expose shelljs
to
the command line.
For example:
$ shx mkdir -p foo
$ shx touch foo/bar.txt
$ shx rm -rf foo
Plugin API
ShellJS now supports third-party plugins! You can learn more about using plugins and writing your own ShellJS commands in the wiki.
A quick note about the docs
For documentation on all the latest features, check out our README. To read docs that are consistent with the latest release, check out the npm page or shelljs.org.
Installing
Via npm:
1$ npm install [-g] shelljs
Examples
1var shell = require('shelljs'); 2 3if (!shell.which('git')) { 4 shell.echo('Sorry, this script requires git'); 5 shell.exit(1); 6} 7 8// Copy files to release dir 9shell.rm('-rf', 'out/Release'); 10shell.cp('-R', 'stuff/', 'out/Release'); 11 12// Replace macros in each .js file 13shell.cd('lib'); 14shell.ls('*.js').forEach(function (file) { 15 shell.sed('-i', 'BUILD_VERSION', 'v0.1.2', file); 16 shell.sed('-i', /^.*REMOVE_THIS_LINE.*$/, '', file); 17 shell.sed('-i', /.*REPLACE_LINE_WITH_MACRO.*\n/, shell.cat('macro.js'), file); 18}); 19shell.cd('..'); 20 21// Run external tool synchronously 22if (shell.exec('git commit -am "Auto-commit"').code !== 0) { 23 shell.echo('Error: Git commit failed'); 24 shell.exit(1); 25}
Exclude options
If you need to pass a parameter that looks like an option, you can do so like:
1shell.grep('--', '-v', 'path/to/file'); // Search for "-v", no grep options 2 3shell.cp('-R', '-dir', 'outdir'); // If already using an option, you're done
Global vs. Local
We no longer recommend using a global-import for ShellJS (i.e.
require('shelljs/global')
). While still supported for convenience, this
pollutes the global namespace, and should therefore only be used with caution.
Instead, we recommend a local import (standard for npm packages):
1var shell = require('shelljs'); 2shell.echo('hello world');
Command reference
All commands run synchronously, unless otherwise stated.
All commands accept standard bash globbing characters (*
, ?
, etc.),
compatible with the node glob
module.
For less-commonly used commands and features, please check out our wiki page.
cat([options,] file [, file ...])
cat([options,] file_array)
Available options:
-n
: number all output lines
Examples:
1var str = cat('file*.txt'); 2var str = cat('file1', 'file2'); 3var str = cat(['file1', 'file2']); // same as above
Returns a string containing the given file, or a concatenated string containing the files if more than one file is given (a new line character is introduced between each file).
cd([dir])
Changes to directory dir
for the duration of the script. Changes to home
directory if no argument is supplied.
chmod([options,] octal_mode || octal_string, file)
chmod([options,] symbolic_mode, file)
Available options:
-v
: output a diagnostic for every file processed-c
: like verbose, but report only when a change is made-R
: change files and directories recursively
Examples:
1chmod(755, '/Users/brandon'); 2chmod('755', '/Users/brandon'); // same as above 3chmod('u+x', '/Users/brandon'); 4chmod('-R', 'a-w', '/Users/brandon');
Alters the permissions of a file or directory by either specifying the absolute permissions in octal form or expressing the changes in symbols. This command tries to mimic the POSIX behavior as much as possible. Notable exceptions:
- In symbolic modes,
a-r
and-r
are identical. No consideration is given to theumask
. - There is no "quiet" option, since default behavior is to run silent.
cp([options,] source [, source ...], dest)
cp([options,] source_array, dest)
Available options:
-f
: force (default behavior)-n
: no-clobber-u
: only copy ifsource
is newer thandest
-r
,-R
: recursive-L
: follow symlinks-P
: don't follow symlinks
Examples:
1cp('file1', 'dir1'); 2cp('-R', 'path/to/dir/', '~/newCopy/'); 3cp('-Rf', '/tmp/*', '/usr/local/*', '/home/tmp'); 4cp('-Rf', ['/tmp/*', '/usr/local/*'], '/home/tmp'); // same as above
Copies files.
pushd([options,] [dir | '-N' | '+N'])
Available options:
-n
: Suppresses the normal change of directory when adding directories to the stack, so that only the stack is manipulated.-q
: Supresses output to the console.
Arguments:
dir
: Sets the current working directory to the top of the stack, then executes the equivalent ofcd dir
.+N
: Brings the Nth directory (counting from the left of the list printed by dirs, starting with zero) to the top of the list by rotating the stack.-N
: Brings the Nth directory (counting from the right of the list printed by dirs, starting with zero) to the top of the list by rotating the stack.
Examples:
1// process.cwd() === '/usr' 2pushd('/etc'); // Returns /etc /usr 3pushd('+1'); // Returns /usr /etc
Save the current directory on the top of the directory stack and then cd
to dir
. With no arguments, pushd
exchanges the top two directories. Returns an array of paths in the stack.
popd([options,] ['-N' | '+N'])
Available options:
-n
: Suppress the normal directory change when removing directories from the stack, so that only the stack is manipulated.-q
: Supresses output to the console.
Arguments:
+N
: Removes the Nth directory (counting from the left of the list printed by dirs), starting with zero.-N
: Removes the Nth directory (counting from the right of the list printed by dirs), starting with zero.
Examples:
1echo(process.cwd()); // '/usr' 2pushd('/etc'); // '/etc /usr' 3echo(process.cwd()); // '/etc' 4popd(); // '/usr' 5echo(process.cwd()); // '/usr'
When no arguments are given, popd
removes the top directory from the stack and performs a cd
to the new top directory. The elements are numbered from 0, starting at the first directory listed with dirs (i.e., popd
is equivalent to popd +0
). Returns an array of paths in the stack.
dirs([options | '+N' | '-N'])
Available options:
-c
: Clears the directory stack by deleting all of the elements.-q
: Supresses output to the console.
Arguments:
+N
: Displays the Nth directory (counting from the left of the list printed by dirs when invoked without options), starting with zero.-N
: Displays the Nth directory (counting from the right of the list printed by dirs when invoked without options), starting with zero.
Display the list of currently remembered directories. Returns an array of paths in the stack, or a single path if +N
or -N
was specified.
See also: pushd
, popd
echo([options,] string [, string ...])
Available options:
-e
: interpret backslash escapes (default)-n
: remove trailing newline from output
Examples:
1echo('hello world'); 2var str = echo('hello world'); 3echo('-n', 'no newline at end');
Prints string
to stdout, and returns string with additional utility methods
like .to()
.
exec(command [, options] [, callback])
Available options:
async
: Asynchronous execution. If a callback is provided, it will be set totrue
, regardless of the passed value (default:false
).silent
: Do not echo program output to console (default:false
).encoding
: Character encoding to use. Affects the values returned to stdout and stderr, and what is written to stdout and stderr when not in silent mode (default:'utf8'
).- and any option available to Node.js's
child_process.exec()
Examples:
1var version = exec('node --version', {silent:true}).stdout; 2 3var child = exec('some_long_running_process', {async:true}); 4child.stdout.on('data', function(data) { 5 /* ... do something with data ... */ 6}); 7 8exec('some_long_running_process', function(code, stdout, stderr) { 9 console.log('Exit code:', code); 10 console.log('Program output:', stdout); 11 console.log('Program stderr:', stderr); 12});
Executes the given command
synchronously, unless otherwise specified. When in synchronous
mode, this returns a ShellString
(compatible with ShellJS v0.6.x, which returns an object
of the form { code:..., stdout:... , stderr:... }
). Otherwise, this returns the child process
object, and the callback
receives the arguments (code, stdout, stderr)
.
Not seeing the behavior you want? exec()
runs everything through sh
by default (or cmd.exe
on Windows), which differs from bash
. If you
need bash-specific behavior, try out the {shell: 'path/to/bash'}
option.
find(path [, path ...])
find(path_array)
Examples:
1find('src', 'lib'); 2find(['src', 'lib']); // same as above 3find('.').filter(function(file) { return file.match(/\.js$/); });
Returns array of all files (however deep) in the given paths.
The main difference from ls('-R', path)
is that the resulting file names
include the base directories (e.g., lib/resources/file1
instead of just file1
).
grep([options,] regex_filter, file [, file ...])
grep([options,] regex_filter, file_array)
Available options:
-v
: Invertregex_filter
(only print non-matching lines).-l
: Print only filenames of matching files.-i
: Ignore case.
Examples:
1grep('-v', 'GLOBAL_VARIABLE', '*.js'); 2grep('GLOBAL_VARIABLE', '*.js');
Reads input string from given files and returns a string containing all lines of the
file that match the given regex_filter
.
head([{'-n': <num>},] file [, file ...])
head([{'-n': <num>},] file_array)
Available options:
-n <num>
: Show the first<num>
lines of the files
Examples:
1var str = head({'-n': 1}, 'file*.txt'); 2var str = head('file1', 'file2'); 3var str = head(['file1', 'file2']); // same as above
Read the start of a file.
ln([options,] source, dest)
Available options:
-s
: symlink-f
: force
Examples:
1ln('file', 'newlink'); 2ln('-sf', 'file', 'existing');
Links source
to dest
. Use -f
to force the link, should dest
already exist.
ls([options,] [path, ...])
ls([options,] path_array)
Available options:
-R
: recursive-A
: all files (include files beginning with.
, except for.
and..
)-L
: follow symlinks-d
: list directories themselves, not their contents-l
: list objects representing each file, each with fields containingls -l
output fields. Seefs.Stats
for more info
Examples:
1ls('projs/*.js'); 2ls('-R', '/users/me', '/tmp'); 3ls('-R', ['/users/me', '/tmp']); // same as above 4ls('-l', 'file.txt'); // { name: 'file.txt', mode: 33188, nlink: 1, ...}
Returns array of files in the given path
, or files in
the current directory if no path
is provided.
mkdir([options,] dir [, dir ...])
mkdir([options,] dir_array)
Available options:
-p
: full path (and create intermediate directories, if necessary)
Examples:
1mkdir('-p', '/tmp/a/b/c/d', '/tmp/e/f/g'); 2mkdir('-p', ['/tmp/a/b/c/d', '/tmp/e/f/g']); // same as above
Creates directories.
mv([options ,] source [, source ...], dest')
mv([options ,] source_array, dest')
Available options:
-f
: force (default behavior)-n
: no-clobber
Examples:
1mv('-n', 'file', 'dir/'); 2mv('file1', 'file2', 'dir/'); 3mv(['file1', 'file2'], 'dir/'); // same as above
Moves source
file(s) to dest
.
pwd()
Returns the current directory.
rm([options,] file [, file ...])
rm([options,] file_array)
Available options:
-f
: force-r, -R
: recursive
Examples:
1rm('-rf', '/tmp/*'); 2rm('some_file.txt', 'another_file.txt'); 3rm(['some_file.txt', 'another_file.txt']); // same as above
Removes files.
sed([options,] search_regex, replacement, file [, file ...])
sed([options,] search_regex, replacement, file_array)
Available options:
-i
: Replace contents offile
in-place. Note that no backups will be created!
Examples:
1sed('-i', 'PROGRAM_VERSION', 'v0.1.3', 'source.js'); 2sed(/.*DELETE_THIS_LINE.*\n/, '', 'source.js');
Reads an input string from file
s, and performs a JavaScript replace()
on the input
using the given search_regex
and replacement
string or function. Returns the new string after replacement.
Note:
Like unix sed
, ShellJS sed
supports capture groups. Capture groups are specified
using the $n
syntax:
1sed(/(\w+)\s(\w+)/, '$2, $1', 'file.txt');
set(options)
Available options:
+/-e
: exit upon error (config.fatal
)+/-v
: verbose: show all commands (config.verbose
)+/-f
: disable filename expansion (globbing)
Examples:
1set('-e'); // exit upon first error 2set('+e'); // this undoes a "set('-e')"
Sets global configuration variables.
sort([options,] file [, file ...])
sort([options,] file_array)
Available options:
-r
: Reverse the results-n
: Compare according to numerical value
Examples:
1sort('foo.txt', 'bar.txt'); 2sort('-r', 'foo.txt');
Return the contents of the file
s, sorted line-by-line. Sorting multiple
files mixes their content (just as unix sort
does).
tail([{'-n': <num>},] file [, file ...])
tail([{'-n': <num>},] file_array)
Available options:
-n <num>
: Show the last<num>
lines offile
s
Examples:
1var str = tail({'-n': 1}, 'file*.txt'); 2var str = tail('file1', 'file2'); 3var str = tail(['file1', 'file2']); // same as above
Read the end of a file
.
tempdir()
Examples:
1var tmp = tempdir(); // "/tmp" for most *nix platforms
Searches and returns string containing a writeable, platform-dependent temporary directory. Follows Python's tempfile algorithm.
test(expression)
Available expression primaries:
'-b', 'path'
: true if path is a block device'-c', 'path'
: true if path is a character device'-d', 'path'
: true if path is a directory'-e', 'path'
: true if path exists'-f', 'path'
: true if path is a regular file'-L', 'path'
: true if path is a symbolic link'-p', 'path'
: true if path is a pipe (FIFO)'-S', 'path'
: true if path is a socket
Examples:
1if (test('-d', path)) { /* do something with dir */ }; 2if (!test('-f', path)) continue; // skip if it's a regular file
Evaluates expression
using the available primaries and returns corresponding value.
ShellString.prototype.to(file)
Examples:
1cat('input.txt').to('output.txt');
Analogous to the redirection operator >
in Unix, but works with
ShellStrings
(such as those returned by cat
, grep
, etc.). Like Unix
redirections, to()
will overwrite any existing file!
ShellString.prototype.toEnd(file)
Examples:
1cat('input.txt').toEnd('output.txt');
Analogous to the redirect-and-append operator >>
in Unix, but works with
ShellStrings
(such as those returned by cat
, grep
, etc.).
touch([options,] file [, file ...])
touch([options,] file_array)
Available options:
-a
: Change only the access time-c
: Do not create any files-m
: Change only the modification time-d DATE
: ParseDATE
and use it instead of current time-r FILE
: UseFILE
's times instead of current time
Examples:
1touch('source.js'); 2touch('-c', '/path/to/some/dir/source.js'); 3touch({ '-r': FILE }, '/path/to/some/dir/source.js');
Update the access and modification times of each FILE
to the current time.
A FILE
argument that does not exist is created empty, unless -c
is supplied.
This is a partial implementation of touch(1)
.
uniq([options,] [input, [output]])
Available options:
-i
: Ignore case while comparing-c
: Prefix lines by the number of occurrences-d
: Only print duplicate lines, one for each group of identical lines
Examples:
1uniq('foo.txt'); 2uniq('-i', 'foo.txt'); 3uniq('-cd', 'foo.txt', 'bar.txt');
Filter adjacent matching lines from input
.
which(command)
Examples:
1var nodeExec = which('node');
Searches for command
in the system's PATH
. On Windows, this uses the
PATHEXT
variable to append the extension if it's not already executable.
Returns string containing the absolute path to command
.
exit(code)
Exits the current process with the given exit code
.
error()
Tests if error occurred in the last command. Returns a truthy value if an error returned, or a falsy value otherwise.
Note: do not rely on the
return value to be an error message. If you need the last error message, use
the .stderr
attribute from the last command's return value instead.
ShellString(str)
Examples:
1var foo = ShellString('hello world');
Turns a regular string into a string-like object similar to what each
command returns. This has special methods, like .to()
and .toEnd()
.
env['VAR_NAME']
Object containing environment variables (both getter and setter). Shortcut
to process.env
.
Pipes
Examples:
1grep('foo', 'file1.txt', 'file2.txt').sed(/o/g, 'a').to('output.txt'); 2echo('files with o\'s in the name:\n' + ls().grep('o')); 3cat('test.js').exec('node'); // pipe to exec() call
Commands can send their output to another command in a pipe-like fashion.
sed
, grep
, cat
, exec
, to
, and toEnd
can appear on the right-hand
side of a pipe. Pipes can be chained.
Configuration
config.silent
Example:
1var sh = require('shelljs'); 2var silentState = sh.config.silent; // save old silent state 3sh.config.silent = true; 4/* ... */ 5sh.config.silent = silentState; // restore old silent state
Suppresses all command output if true
, except for echo()
calls.
Default is false
.
config.fatal
Example:
1require('shelljs/global'); 2config.fatal = true; // or set('-e'); 3cp('this_file_does_not_exist', '/dev/null'); // throws Error here 4/* more commands... */
If true
, the script will throw a Javascript error when any shell.js
command encounters an error. Default is false
. This is analogous to
Bash's set -e
.
config.verbose
Example:
1config.verbose = true; // or set('-v'); 2cd('dir/'); 3rm('-rf', 'foo.txt', 'bar.txt'); 4exec('echo hello');
Will print each command as follows:
cd dir/
rm -rf foo.txt bar.txt
exec echo hello
config.globOptions
Example:
1config.globOptions = {nodir: true};
Use this value for calls to glob.sync()
instead of the default options.
config.reset()
Example:
1var shell = require('shelljs'); 2// Make changes to shell.config, and do stuff... 3/* ... */ 4shell.config.reset(); // reset to original state 5// Do more stuff, but with original settings 6/* ... */
Reset shell.config
to the defaults:
1{ 2 fatal: false, 3 globOptions: {}, 4 maxdepth: 255, 5 noglob: false, 6 silent: false, 7 verbose: false, 8}
Team
Nate Fischer | Brandon Freitag |
Stable Version
Stable Version
0.8.5
HIGH
1
7.1/10
Summary
Improper Privilege Management in shelljs
Affected Versions
< 0.8.5
Patched Versions
0.8.5
MODERATE
1
0/10
Summary
Improper Privilege Management in shelljs
Affected Versions
< 0.8.5
Patched Versions
0.8.5
Reason
security policy file detected
Details
- Info: security policy file detected: .github/SECURITY.md:1
- Info: Found linked content: .github/SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1
- Info: Found text in security policy: .github/SECURITY.md:1
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
0 existing vulnerabilities detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: BSD 3-Clause "New" or "Revised" License: LICENSE:0
Reason
0 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 3
Reason
Found 6/30 approved changesets -- score normalized to 2
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/main.yml:1
- Info: no jobLevel write permissions found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/shelljs/shelljs/main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/shelljs/shelljs/main.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/shelljs/shelljs/main.yml/master?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/main.yml:57
- Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 third-party GitHubAction dependencies pinned
- Info: 0 out of 1 npmCommand dependencies pinned
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Score
5
/10
Last Scanned on 2024-12-16
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More