Function spawn

ng-dev/utils/child-process.ts:122–135

* Spawns a given command with the specified arguments inside a shell. All process stdout * output is captured and returned as resolution on completion. Depending on the chosen * output mode, stdout/stderr output is also printed to the console, or only on error. * * @returns a Promise res

(command: string, args: string[], options: SpawnOptions = {})

   *   rejects on command failure.
   */
  static spawn(command: string, args: string[], options: SpawnOptions = {}): Promise<SpawnResult> {
    // Default shell to false to prevent OS command injection: with shell: true, Node.js
    // internally joins command + args into a single string evaluated by /bin/sh, making
    // shell metacharacters in args exploitable. Callers that genuinely require shell
    // features (e.g. sourcing shell scripts) may explicitly pass shell: true.
    const commandText = `${command} ${args.join(' ')}`;
    const env = getEnvironmentForNonInteractiveCommand(options.env);

    return processAsyncCmd(
      commandText,
      options,
      _spawn(command, args, {...options, env, stdio: 'pipe'}),
    );
  }

  /**
   * Execs a given command with the specified arguments inside a shell. All process stdout