I think we should setshell=False inPopen for the changed commands in this PR, but it doesn’t seem to work on Windows (which is odd). We’ll probably need a different approach to escaping file paths. Any thoughts?

Edit:
I’ve added logic to useshell=False when passing the command as a list of arguments. Also, instead of hardcoding the Python executable name, it’s better to usesys.executable so we stay within the active environment (otherwise it might pick up the global Python rather than our.venv). Finally, the calls weren’t uniform as some usedpython3 and others justpython which could lead to failures (depending on the environment or OS). Let me know what you think!