File: README.Debian

package info (click to toggle)
node-yarnpkg 1.13.0-1%2Bdeb10u1
  • links: PTS, VCS
  • area: main
  • in suites: buster
  • size: 93,036 kB
  • sloc: sh: 323; makefile: 19
file content (17 lines) | stat: -rw-r--r-- 681 bytes parent folder | download | duplicates (3)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
yarnpkg for Debian
------------------
Note that this package launches external commands with child_process.exec
which spawns a shell then executes the command within that shell, rather than
with the more efficient and more secure child_process.execFile which does not
spawn a shell, and spawns the specified executable file directly as a new
process.

This also means that it needs node-puka to sanitize the string passed to
child_process.exec.

Also see:
- https://bugs.debian.org/886849
- http://bonedaddy.net/pabs3/log/2014/02/17/pid-preservation-society/
- https://github.com/yarnpkg/yarn/issues/5208

 -- Paolo Greppi <paolo.greppi@libpf.com>  Sat, 07 Apr 2018 15:38:31 +0200