Track DEP0190 warnings from http-client-python install and prepare scripts

Abierto
  • ¿Algo no está bien?
#11,603 1 comentario 1 reacción 1 asignado Ver en GitHub

Los mantenedores suelen responder en 1 día

@msyyc ya está trabajando en esto.

Desde el 10/8/2026.

Evaluación

Este issue todavía no se ha evaluado.

Descripción

bug emitter:client:python

Description

Running npm install in packages/http-client-python emits Node.js DEP0190 deprecation warnings from the package install and prepare setup scripts.

Repro

cd C:\dev\typespec\packages\http-client-python
npm install

Observed output

> @typespec/[email protected] install
> node ./eng/scripts/setup/install-runner.js

(node:27040) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.
(Use `node --trace-deprecation ...` to show where the warning was created)
Found Python on your local environment and created a venv with all requirements.

> @typespec/[email protected] prepare
> node ./eng/scripts/setup/prepare-runner.js

(node:46868) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.
(Use `node --trace-deprecation ...` to show where the warning was created)

Expected behavior

npm install should complete without Node.js deprecation warnings.

Notes

The warning points to child process usage with shell: true where arguments are passed separately. The relevant setup scripts appear to be:

  • packages/http-client-python/eng/scripts/setup/install-runner.js
  • packages/http-client-python/eng/scripts/setup/prepare-runner.js

This should be investigated and updated to avoid the deprecated child process pattern.

Lenguaje dominante
Java
Estrellas
5.9k
Forks
421
Merge medio
2 d 3 h
PR fusionados (30 d)
176

Preparar el entorno

Abrir en Codespaces

Inicia el contenedor de desarrollo del proyecto en tu navegador, con tu propia cuenta de GitHub.

Primeros pasos

  1. Lee el issue completo y luego la guía de contribución del proyecto.
  2. Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
  3. Haz un fork del repositorio y trabaja en una rama.
  4. Abre un pull request que haga referencia al número del issue.

Más de microsoft/typespec

Todos los issues de microsoft/typespec

Issues similares

Más issues de Java

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.