mustache
Logic-less {{mustache}} templates with JavaScript
68%
Total Score
50
100
89
67
Health Score Breakdown
The repository is owned by an individual rather than an organization, so continuity depends more on a small maintainer base and the observed maintenance activity.
The package has 39 releases since January 2012, but none in the last 12 months and the latest release was about five years ago. This materially raises staleness risk despite its long release history.
There were no commits and no active maintainers in the last three months. This supports the concern that ongoing maintenance has slowed, although the repository is not archived.
The repository uses npm scripts and Rollup, showing an established build process, but no security scanning tools were detected. The missing scanning is a modest hygiene gap.
No security policy was found in the repository, reducing transparency about vulnerability reporting and response.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2015-8862 mustache is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 2.2.1. | 0.0.0 - 2.2.1 | Medium |
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 14 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.