
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
squirrelly
Advanced tools
Simple and powerful template engine that supports helpers, partials, filters, native code, and Express.
Summary
Squirrelly is a modern, configurable, and blazing fast template engine implemented in JavaScript. It works out of the box with ExpressJS and the full version weighs only ~2.2KB gzipped.
Notice: Squirrelly Version 8 is coming out soon! Learn More
We know nobody reads through the long and boring documentation in the ReadMe anyway, so head over to the documentation website:
var myTemplate = "<p>My favorite kind of cake is: {{favoriteCake}}</p>"
Sqrl.Render(myTemplate, {favoriteCake: 'Chocolate!'})
// Returns: '<p>My favorite kind of cake is: Chocolate!</p>
{{if(options.somevalue === 1)}}
Display this
{{#else}}
Display this
{{/if}}
{{each(options.somearray)}}
Display this
The current array element is {{@this}}
The current index is {{@index}}
{{/each}}
The default test can be run with npm test
, and it just checks that compiling and rendering a simple template results in the correct string.
We love contributions from the community! Contributions are accepted using GitHub pull requests; for more information, see GitHub documentation - Creating a pull request.
For a good pull request, we ask you provide the following:
README.md
file as well.Ben Gubler 💻 💬 📖 ⚠️ | Mark Evans 💻 | donpedro 💬 |
This project exists thanks to all the people who contribute. We welcome contributions! Learn how to contribute here.
Some of you may have been wondering about the lack of activity on this repository over the last few months. The answer is that, for quite a while, I've been working on a brand-new version of Squirrelly. You can read about it on GitHub, but here's a quick overview:
~
, so {{~if(options.stuff}}
{{=4+3}}
{{js(var x = 0)/}}
will become: {{!var x = 0}}
{{somearray | join(",") }}
Squirrelly is licensed under the MIT license.
FAQs
Lightweight, fast, and powerful JS template engine. Supports helpers, filters, template inheritance
The npm package squirrelly receives a total of 21,120 weekly downloads. As such, squirrelly popularity was classified as popular.
We found that squirrelly demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.