I think it'd make more sense if we were using it properly. We're passing a single string to it, rather than a command and a set of arguments to escape.  I wouldn't say Cocaine is a particularly heavy dependency, though.