
Security News
AI Agent Lands PRs in Major OSS Projects, Targets Maintainers via Cold Outreach
An AI agent is merging PRs into major OSS projects and cold-emailing maintainers to drum up more work.
A node.js view system similar to what you're used to with Express' res.render().
Inspired by co-views and
consolidate.js.
.render() always returns a Promise.$ npm install templation
var Templation = require('templation')
var views = new Templation()
views.use('html', Templation.engines.html)
Create a new view system. Options are:
cache - whether to cache the templates.
Defaults to true in production.root - the root folder to look for templates.
Defaults to process.cwd(), so you should set this.Use a custom view engine.
extension is a file extension to map this engine to.
engine is an object with the following methods:
.compile(filename, options) - it should return (optionally via promise)
a "compiled template". The "compiled template" must be an object or function.
This gets cached when cache: true!.render(compiled, options) - compiled is whatever is compiled from .compile().
It should return (optionally via promise) a String, Buffer, or StreamRender the template name, which resolves against root.
Returns a promise, which then returns a String, Buffer, or Stream.
Enable or disable the caching system. (true / false)
A list of included engines. Generally, the API usage is:
views.use('html', Templation.engines.html)
Included adapters are:
var Templation = require('templation')
var views = new Templation()
views.use('html', Templation.engines.html)
http.createServer(function (req, res) {
views.render('home').then(function (html) {
// assuming html is a string
res.setHeader('Content-Length', Buffer.byteLength(html))
res.setHeader('Content-Type', 'text/html')
res.end(html)
}, function (err) {
res.statusCode = err.status || 500
res.end('Internal Server Error')
})
})
FAQs
an asynchronous, extensible view system
We found that templation demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
An AI agent is merging PRs into major OSS projects and cold-emailing maintainers to drum up more work.

Research
/Security News
Chrome extension CL Suite by @CLMasters neutralizes 2FA for Facebook and Meta Business accounts while exfiltrating Business Manager contact and analytics data.

Security News
After Matplotlib rejected an AI-written PR, the agent fired back with a blog post, igniting debate over AI contributions and maintainer burden.