About this project

Shescape provides a simple, lightweight API to escape strings for various shells, preventing shell injection attacks. It detects the target shell automatically and supports Unix shells (Bash, BusyBox, csh, Dash, Zsh) and Windows shells (cmd.exe, PowerShell). Installation is via npm, and usage involves creating a Shescape instance and calling its escape methods. The library also guards against environment variable access and flag injection, and includes documentation for use cases, recipes, migration, and testing.