[[CHORE]] Remove shelljs from internal tooling

jugglinmike · rwaldron · commit b23e125c95ef · 2022-01-24T12:54:41.000-05:00
The "shelljs" package upon which JSHint depends includes a security vulnerability [1]. Remove it from the project's internal tooling as part of a larger effort to remove it entirely. [1] #3599
diff --git a/bin/build b/bin/build
@@ -1,24 +1,23 @@
 #!/usr/bin/env node
-/*jshint shelljs:true */
 
 "use strict";
 
+var fs         = require("fs");
 var path       = require("path");
 var build      = require("../scripts/build");
-require("shelljs/make");
 
 var distDir    = path.join(__dirname, "../dist");
 
-if (!test("-e", distDir))
-  mkdir(distDir);
+if (!fs.existsSync(distDir))
+  fs.mkdirSync(distDir);
 
 build("web", function(err, version, src) {
   if (err) {
     console.error(err);
     process.exit(1);
   }
 
-  src.to(distDir + "/jshint.js");
+  fs.writeFileSync(distDir + "/jshint.js", src, "utf8");
   console.log("Built: " + version + " (web)");
 });
 
@@ -31,8 +30,8 @@ build("rhino", function(err, version, src) {
   }
 
   dest  = distDir + "/jshint-rhino.js";
-  chmod("+x", dest);
 
-  src.to(dest);
+  fs.writeFileSync(dest, src, "utf8");
+  fs.chmodSync(dest, "0775");
   console.log("Built: " + version + " (Rhino)");
 });
diff --git a/bin/land b/bin/land
@@ -2,9 +2,9 @@
 
 "use strict";
 
+var child_process = require("child_process");
 var url   = "https://github.com/jshint/jshint/pull/" + process.argv[2] + ".patch";
 var https = require("https");
-var shjs  = require("shelljs");
 var opts  = require("url").parse(url);
 var msg   = process.argv[3];
 
@@ -27,7 +27,7 @@ function succ(res) {
     data = data[1].replace(/^From\:\s/, "");
     data = data.replace(/"/g, "");
 
-    shjs.exec("git commit -s --author=\"" + data + "\" --message=\"" + msg + "\"");
+    child_process.execSync("git commit -s --author=\"" + data + "\" --message=\"" + msg + "\"");
   });
 }
 
