Track DEP0190 warnings from http-client-python install and prepare scripts

未关闭
#11,603 1 条评论 1 个 reaction 已指派 1 人 在 GitHub 查看

维护者通常 1 天内回复

@msyyc 已经在做这个了。

开始于 2026年8月10日。

评估

这个 Issue 还没有评估数据。

描述

bug emitter:client:python

Description

Running npm install in packages/http-client-python emits Node.js DEP0190 deprecation warnings from the package install and prepare setup scripts.

Repro

cd C:\dev\typespec\packages\http-client-python
npm install

Observed output

> @typespec/[email protected] install
> node ./eng/scripts/setup/install-runner.js

(node:27040) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.
(Use `node --trace-deprecation ...` to show where the warning was created)
Found Python on your local environment and created a venv with all requirements.

> @typespec/[email protected] prepare
> node ./eng/scripts/setup/prepare-runner.js

(node:46868) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.
(Use `node --trace-deprecation ...` to show where the warning was created)

Expected behavior

npm install should complete without Node.js deprecation warnings.

Notes

The warning points to child process usage with shell: true where arguments are passed separately. The relevant setup scripts appear to be:

  • packages/http-client-python/eng/scripts/setup/install-runner.js
  • packages/http-client-python/eng/scripts/setup/prepare-runner.js

This should be investigated and updated to avoid the deprecated child process pattern.

主要语言
Java
星标
5.9k
派生
421
平均合并
2 天 3 小时
30 天内合并 PR
176

环境准备

在 Codespaces 中打开

在浏览器里用你自己的 GitHub 账号启动这个项目的开发容器。

  • 没有 Dockerfile 或 Docker Compose 文件
  • 没有 Pull Request 模板
  • 阅读贡献指南

从这里开始

  1. 先读完整个 Issue,再读项目的贡献指南。
  2. 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
  3. Fork 仓库,在一个分支上完成修改。
  4. 提交 Pull Request,并在描述里引用这个 Issue 编号。

microsoft/typespec 的其他 Issue

查看 microsoft/typespec 的全部 Issue

相似的 Issue

更多 Java Issue

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。