{"id":16104745,"url":"https://github.com/sergeymakinen/go-quote","last_synced_at":"2026-05-02T08:34:55.906Z","repository":{"id":45131117,"uuid":"339780924","full_name":"sergeymakinen/go-quote","owner":"sergeymakinen","description":"Command-line arguments and variables quoting and unquoting","archived":false,"fork":false,"pushed_at":"2023-12-17T14:59:22.000Z","size":38,"stargazers_count":2,"open_issues_count":0,"forks_count":1,"subscribers_count":1,"default_branch":"main","last_synced_at":"2026-04-26T10:06:14.229Z","etag":null,"topics":["cmdline","commandline","go","golang","quote","shell","unix","windows"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/sergeymakinen.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-02-17T16:12:59.000Z","updated_at":"2025-10-28T13:06:16.000Z","dependencies_parsed_at":"2023-12-17T10:31:20.541Z","dependency_job_id":"72f122db-e454-4efe-be22-340b91d22c9e","html_url":"https://github.com/sergeymakinen/go-quote","commit_stats":{"total_commits":9,"total_committers":1,"mean_commits":9.0,"dds":0.0,"last_synced_commit":"35538bf8f245e5d604fcb3000a9dd4531762e13f"},"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/sergeymakinen/go-quote","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sergeymakinen%2Fgo-quote","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sergeymakinen%2Fgo-quote/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sergeymakinen%2Fgo-quote/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sergeymakinen%2Fgo-quote/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/sergeymakinen","download_url":"https://codeload.github.com/sergeymakinen/go-quote/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sergeymakinen%2Fgo-quote/sbom","scorecard":{"id":812262,"data":{"date":"2025-08-11","repo":{"name":"github.com/sergeymakinen/go-quote","commit":"35538bf8f245e5d604fcb3000a9dd4531762e13f"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":0,"reason":"Found 0/9 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"SAST","score":0,"reason":"no SAST tool detected","details":["Warn: no pull requests merged into dev branch"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/goreleaser.yml:1","Warn: no topLevel permission defined: .github/workflows/tests.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/goreleaser.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/sergeymakinen/go-quote/goreleaser.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/goreleaser.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/sergeymakinen/go-quote/goreleaser.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/goreleaser.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/sergeymakinen/go-quote/goreleaser.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/sergeymakinen/go-quote/tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/sergeymakinen/go-quote/tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/sergeymakinen/go-quote/tests.yml/main?enable=pin","Info:   0 out of   4 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-23T13:27:42.116Z","repository_id":45131117,"created_at":"2025-08-23T13:27:42.116Z","updated_at":"2025-08-23T13:27:42.116Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32528406,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-02T01:12:54.858Z","status":"online","status_checked_at":"2026-05-02T02:00:05.923Z","response_time":132,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cmdline","commandline","go","golang","quote","shell","unix","windows"],"created_at":"2024-10-09T19:06:08.769Z","updated_at":"2026-05-02T08:34:55.890Z","avatar_url":"https://github.com/sergeymakinen.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# quote\n\n[![tests](https://github.com/sergeymakinen/go-quote/workflows/tests/badge.svg)](https://github.com/sergeymakinen/go-quote/actions?query=workflow%3Atests)\n[![Go Reference](https://pkg.go.dev/badge/github.com/sergeymakinen/go-quote.svg)](https://pkg.go.dev/github.com/sergeymakinen/go-quote)\n[![Go Report Card](https://goreportcard.com/badge/github.com/sergeymakinen/go-quote)](https://goreportcard.com/report/github.com/sergeymakinen/go-quote)\n[![codecov](https://codecov.io/gh/sergeymakinen/go-quote/branch/main/graph/badge.svg)](https://codecov.io/gh/sergeymakinen/go-quote)\n\nPackage quote defines interfaces shared by other packages\nthat quote command-line arguments and variables.\n\nSee the documentation for the [unix](https://pkg.go.dev/github.com/sergeymakinen/go-quote/unix) and [windows](https://pkg.go.dev/github.com/sergeymakinen/go-quote/windows) packages for more information.\n\n## Installation\n\nUse go get:\n\n```bash\ngo get github.com/sergeymakinen/go-quote\n```\n\nThen import the package into your own code:\n\n```go\nimport \"github.com/sergeymakinen/go-quote\"\n```\n\n\n## Example\n\n### Unix\n\n```go\nfilename := `Long File With 'Single' \u0026 \"Double\" Quotes.txt`\nfmt.Println(unix.SingleQuote.MustQuote(filename))\n// Echoing inside 'sh -c' requires a quoting to make it safe with an arbitrary string\nquoted := unix.SingleQuote.Quote(filename)\nfmt.Println([]string{\n\t\"sh\",\n\t\"-c\",\n\tfmt.Sprintf(\"echo %s | callme\", quoted),\n})\nunquoted, _ := unix.SingleQuote.Unquote(quoted)\nfmt.Println(unquoted)\n// Output:\n// true\n// [sh -c echo 'Long File With '\"'\"'Single'\"'\"' \u0026 \"Double\" Quotes.txt' | callme]\n// Long File With 'Single' \u0026 \"Double\" Quotes.txt\n```\n\n### Windows\n\n```go\n// If you have to deal with a different from Argv command-line quoting\n// when starting processes on Windows, don't forget to manually create a command-line\n// via the CmdLine SysProcAttr attribute:\n//\n//  cmd := exec.Command(name)\n//  cmd.SysProcAttr = \u0026windows.SysProcAttr{\n//  \tCmdLine: strings.Join(args, \" \"),\n//  }\nfilename := `Long File With 'Single' \u0026 \"Double\" Quotes.txt`\nfmt.Println(windows.Argv.MustQuote(filename))\n// Using both Argv and Cmd quoting as callme.exe requires the Argv quoting\n// and its safe usage in cmd.exe requires the Cmd quoting\nquoted := windows.Argv.Quote(filename)\nfmt.Println([]string{\n\t\"cmd.exe\",\n\t\"/C\",\n\tfmt.Sprintf(\"callme.exe %s\", windows.Cmd.Quote(quoted)),\n})\nunquoted, _ := windows.Cmd.Unquote(quoted)\nunquoted, _ = windows.Argv.Unquote(unquoted)\nfmt.Println(unquoted)\n// Output:\n// true\n// [cmd.exe /C callme.exe ^\"Long^ File^ With^ ^'Single^'^ ^\u0026^ \\^\"Double\\^\"^ Quotes.txt^\"]\n// Long File With 'Single' \u0026 \"Double\" Quotes.txt\n```\n\n## License\n\nBSD 3-Clause\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsergeymakinen%2Fgo-quote","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsergeymakinen%2Fgo-quote","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsergeymakinen%2Fgo-quote/lists"}