René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Conflict between `child_process` API guidance and DEP0190","articleBody":"### Affected URL(s)\n\nhttps://nodejs.org/docs/latest-v24.x/api/child_process.html#spawning-bat-and-cmd-files-on-windows\n\n### Description of the problem\n\nThe suggestions here include using `spawn` with `shell: true`, however doing so is deprecated with [DEP0190](https://nodejs.org/docs/latest-v24.x/api/deprecations.html#dep0190-passing-args-to-nodechild_process-execfilespawn-with-shell-option-true). This conflicting messaging is confusing and makes this difficult-to-use-safely API even more confusing to use for non-experts.\n\nI don't know what the right call is here. My guess is that DEP0190 was created to nudge people away from using `spawn` with `shell: true` by either using it safely or explicitly using the insecure `exec` command. Since the only alternative in the documentation is `exec` I'd suggest removing the suggestion to use `spawn` with `shell: true` entirely.","author":{"url":"https://github.com/ericcornelissen","@type":"Person","name":"ericcornelissen"},"datePublished":"2025-06-16T21:08:54.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":5},"url":"https://github.com/58735/node/issues/58735"}