fix(package-manager): prevent CWE-78 OS command injection across all Windows spawn paths#1

Open

g0w6y wants to merge 7 commits intomainfrom

fix/windows-spawn-command-injection

Commits on Mar 28, 2026

fix(package-manager): prevent command injection via shell metacharacters on Windows
g0w6y
committed
fix(cli): mitigate CWE-78 command injection on Windows
g0w6y
committed