Fastfetch, a cross-platform system information tool written in C, has released version 2.70.0. According to Help Net Security, the update removes QuickJS scripting support and changes what the Disk, Command, and Shell modules report.
Removing QuickJS scripting eliminates a potential vector for executing JavaScript within the tool, reducing the attack surface for users on Linux, macOS, Windows, Android, and BSD systems. This is a notable security improvement for a utility that is often run to display system details.
The changes to the Disk, Command, and Shell modules mean the tool now reports different information about storage, running commands, and shell configuration. Users and administrators should review the updated output to ensure it does not expose unintended details about their systems.
Fastfetch 2.70.0 is available for download. The project's decision to drop scripting and adjust module reporting reflects a broader trend toward simplifying system utilities to improve security and predictability.