shell-sanitize vs shell-sanitize-rules vs strict-path

Type-safe input sanitizer for shell arguments and file paths — rejects injection, traversal, and expansion attacks

Built-in sanitization rules for shell-sanitize: shell metacharacters, path traversal, glob, env expansion, control chars

Handle paths from external or unknown sources securely. Defends against 19+ real-world CVEs including symlinks, Windows 8.3 short names, and encoding tricks and exploits.