
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
@stll/template-conditions
Advanced tools
A document-template marker and condition engine: {{...}} marker grammar, parse, compute, serialize, field values.
A document-template marker and condition engine: the {{...}} marker grammar,
an expression parser, numeric/arithmetic compute, a condition-builder
serializer, and deterministic field-value rendering. Small, side-effect-free
functions usable on both backend (Bun) and frontend (browser).
Boolean conditions are evaluated through the canonical
@stll/conditions
AST and its single evaluator, so template {% if ... %} conditionals share one
set of operators and semantics with the rest of the system. This package owns
the template surface: the marker grammar, the string parser, the named-condition
resolver, the numeric expression evaluator, and the no-code builder serializer.
import { evaluateCondition, scanMarkers } from "@stll/template-conditions";
const branch = evaluateCondition("isCompany and signed", fillData);
for (const marker of scanMarkers(templateText)) {
// marker.kind, marker.path, ...
}
bun add @stll/template-conditions
.)evaluateCondition, parseCondition,
evaluateNumericExpression, serializeCondition, resolvePath.renderDeterministicFieldValue, renderComposite,
formatDate.scanMarkers, classifyMarker, markerPattern,
placeholderPattern, and the directive-kind constants.Apache-2.0
FAQs
A document-template marker and condition engine: {{...}} marker grammar, parse, compute, serialize, field values.
The npm package @stll/template-conditions receives a total of 3,296 weekly downloads. As such, @stll/template-conditions popularity was classified as popular.
We found that @stll/template-conditions demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.