Loading npm security reports…
一个HTML模板工具包,提供开发服务器和模板编译功能,支持自定义标签和快捷输入,变量定义,包含文件引用,帮助开发者模块化处理HTML;
Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage source references dynamic require/import behavior.
static/utils/foldgutter.jsView on unpkg · L3Package source executes code through a VM context API.
services/templateService.jsView on unpkg · L29Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L74Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L74Package source references dynamic require/import behavior.
static/utils/foldgutter.jsView on unpkg · L3Package source executes code through a VM context API.
services/templateService.jsView on unpkg · L29