Node version (or tell us if you're using electron or some other framework):

8.0.0

ShellJS version (the most recent version/Github branch you see the bug on):

0.7.8

Operating system:

Linux

Description of the bug:

Snyk reports high severity vulnerability in shelljs

Example ShellJS command to reproduce the error:

In a repository with ShellJS as a dependency:

username> snyk test

✗ High severity vulnerability found on shelljs@0.7.8
- desc: Command Injection
- info: https://snyk.io/vuln/npm:shelljs:20140723
- from: xxx@0.1.0 > shelljs@0.7.8
Fix: None available. Consider removing this dependency.

This is related to issues 143, 495, and PR 524. Wasn't sure if the project was aware that ShellJS will break builds using vulnerability scanning in their CI workflow.