package.json

@@ -1,6 +1,6 @@
 {
   "name": "npm-check-updates",
-  "version": "16.7.6",
+  "version": "16.7.7",
   "author": "Tomas Junnonen <tomas1@gmail.com>",
   "license": "Apache-2.0",
   "contributors": [

src/lib/runLocal.ts

@@ -278,12 +278,16 @@ async function runLocal(
         writePromise = fs.writeFile(pkgFile, newPkgData)
       } else {
         const ncuCmd = process.env.npm_lifecycle_event === 'npx' ? 'npx npm-check-updates' : 'ncu'
-        const argv = process.argv.slice(2).join(' ')
+        // quote arguments with spaces
+        const argv = process.argv
+          .slice(2)
+          .map(arg => (arg.includes(' ') ? `"${arg}"` : arg))
+          .join(' ')
         const ncuOptions = argv ? ' ' + argv : argv
-        print(
-          options,
-          `\nRun ${chalk.cyan(`${ncuCmd}${ncuOptions} -u`)} to upgrade ${options.packageFile || 'package.json'}`,
-        )
+        const upgradeHint = `\nRun ${chalk.cyan(`${ncuCmd}${ncuOptions} -u`)} to upgrade ${
+          options.packageFile || 'package.json'
+        }`
+        print(options, upgradeHint)
       }
     }
 

test/bin.test.ts

@@ -161,6 +161,24 @@ describe('bin', async function () {
     const output = await spawn('node', [bin, '--silent'], '{ "dependencies": { "express": "1" } }')
     output.trim().should.equal('')
   })
+
+  it('quote arguments with spaces in upgrade hint', async () => {
+    const pkgData = {
+      dependencies: {
+        'ncu-test-v2': '^1.0.0',
+        'ncu-test-tag': '^1.0.0',
+      },
+    }
+    const tempDir = await fs.mkdtemp(path.join(os.tmpdir(), 'npm-check-updates-'))
+    const pkgFile = path.join(tempDir, 'package.json')
+    await fs.writeFile(pkgFile, JSON.stringify(pkgData), 'utf-8')
+    try {
+      const output = await spawn('node', [bin, '--packageFile', pkgFile, '--filter', 'ncu-test-v2 ncu-test-tag'])
+      output.should.include('"ncu-test-v2 ncu-test-tag"')
+    } finally {
+      await fs.rm(tempDir, { recursive: true, force: true })
+    }
+  })
 })
 
 describe('embedded versions', () => {