R-CMD-check / R CMD check (pull_request) Successful in 3m50s
Use system2() with separate args instead of shell-interpolated system() calls in .send_desktop_notify() and .send_webhook(). This eliminates command injection risk when msg, status, url, or payload contain shell metacharacters.