3 ms·

Pipelining CLI commands or bash scripts. From a security perspective, it may be preferable to not ship with a runtime.

• vips7L 3y ago
  bash and jq are both runtimes.
  • bdcravens 3y ago
    Very difficult (or often impractical) to not have a shell at all, and jq is at least limited in scope, and has no dependencies that need to be installed. Far better than a full language with its own standard library and set of dependencies to lock down.
• jonfw 3y ago
  Use a compiled language like golang if you don't want to ship with a runtime. If you're willing to ship w/ bash then I don't understand the opposition to JS. Either tool puts you in a scenario where somebody who can exec into your env can do whatever they want