nunjucks

A powerful templating engine with inheritance, asynchronous control, and more (jinja2 inspired)

Latest 3.2.4

NPM

61%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Attestations

Are you affected? Scan for Free

Health Score Breakdown

Build provenance

No build attestation or trusted-publisher provenance is present, so consumers cannot verify how this artifact was produced from the repository.

Lifecycle scripts

A prepare script runs during installation or package preparation, adding execution behavior beyond ordinary file installation and a modest supply-chain review concern.

Release history

The project has a long history with 69 releases and a roughly 12-day median interval, but its latest release was more than three years ago and it had no releases in the last year.

Repo commit activity

There were no commits and no active maintainers in the last three months, which is direct evidence of currently stalled development.

Repo issue activity

The repository has 288 open issues and 78 open pull requests, with six new pull requests but no merged pull requests in the last month; this suggests a backlog and limited throughput.

Vulnerabilities

Title	Versions	Severity
CVE-2023-2142 nunjucks is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 3.2.4.	0.0.0 - 3.2.4	Medium
CVE-2016-10547 nunjucks is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 2.4.3.	0.0.0 - 2.4.3	Medium