Merge pull request #4 from Sm1lEE

fix: escape php_binary path to ensure correct usage as shell argument

src/Installer.php

@@ -72,7 +72,7 @@ public function install(IOInterface $io, bool $force, bool $enabled): void
         $onlyEnabled    = $enabled ? ' --only-enabled' : '';
 
         // sub process settings
-        $cmd   = PHP_BINARY . ' '  . $executable . ' install'
+        $cmd   = escapeshellarg(PHP_BINARY) . ' '  . $executable . ' install'
                  . $ansi . ' --no-interaction' . $forceOrSkip . $onlyEnabled
                  . $configuration . $repository;
         $pipes = [];