← Home

@budibase/string-templates

npm

Handlebars wrapper for Budibase templating.

100
Versions
MPL-2.0
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

melbudibasepclmntjoranamochristos-budibase

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
semgrep semgrep:base64-decode AI (semgrep): Plain atob/base64 utility helper, no payload delivery. ai
semgrep semgrep:eval-usage AI (semgrep): eval used for template/snippet caching, not remote code execution. ai
provenance publisher-changed-stale AI (provenance): Stale unremoved publish over 193d indicates legitimate change, not compromise. ai
maintainer-change maintainer-removed AI (maintainer-change): Same transition context; not a takeover pattern. ai
maintainer-change maintainer-added AI (maintainer-change): Publisher stable for 193d with strong track record; consistent with org transition. ai
provenance publisher-changed AI (provenance): christos-budibase is an established Budibase org publisher; internal team rotation, not a takeover signal. ai
phantom-deps phantom-dep:lodash.clonedeep AI (phantom-deps): Declared and used; phantom-dep heuristic is imperfect for bundled/re-exported deps. ai
publish-pattern dormant-publish AI (publish-pattern): Budibase monorepo with 3112 versions; org publisher account; no content changes from prior approved version. ai
dependencies unvetted-dep:@budibase/vm-browserify AI (dependencies): Same org scope (@budibase); internal dependency stable across Budibase monorepo versions. ai
dependencies unvetted-dep:handlebars AI (dependencies): handlebars is a well-known templating library; pinned to 4.7.9 which is the latest stable release. ai
phantom-deps phantom-dep:@budibase/vm-browserify AI (phantom-deps): Same-org scoped dep; likely bundled via rollup rather than directly imported. ai
bogus-package bogus-package AI (bogus-package): Internal Budibase monorepo package; sparse README and missing metadata are expected for scoped internal packages. ai
phantom-deps phantom-dep:@budibase/handlebars-helpers AI (phantom-deps): Same-org scoped dep; likely bundled via rollup rather than directly imported. ai

Versions (showing 100 of 332)

Version Deps Published
3.41.0 4 / 11
3.40.1 4 / 11
3.40.0 4 / 11
3.39.32 4 / 11
3.39.31 4 / 11
3.39.30 4 / 11
3.39.29 4 / 11
3.39.28 4 / 11
3.39.15 4 / 11
3.38.5 4 / 11
3.38.4 4 / 11
3.38.3 4 / 11
3.38.2 4 / 11
3.38.1 4 / 11
3.38.0 4 / 11
3.37.5 4 / 11
3.37.4 4 / 11
3.37.3 4 / 11
3.37.2 4 / 11
3.37.1 4 / 11
3.37.0 4 / 11
3.36.5 4 / 11
3.36.3 4 / 11
3.36.1 4 / 11
3.35.3 4 / 11
3.35.2 4 / 11
3.35.1 4 / 11
3.35.0 4 / 11
3.34.11 4 / 11
3.34.10 4 / 11
3.34.9 4 / 11
3.34.8 4 / 11
3.34.7 4 / 11
3.34.6 4 / 11
3.34.5 4 / 11
3.34.4 5 / 11
3.34.3 5 / 11
3.34.2 5 / 11
3.34.1 5 / 11
3.34.0 5 / 11
3.33.5 5 / 11
3.33.4 5 / 11
3.33.2 5 / 11
3.33.1 5 / 11
3.33.0 5 / 11
3.32.6 5 / 11
3.32.5 5 / 11
3.32.3 5 / 11
3.32.2 5 / 11
3.32.0 5 / 11
3.31.9 5 / 11
3.31.7 5 / 11
3.31.6 5 / 11
3.31.5 5 / 11
3.31.4 5 / 11
3.31.3 4 / 11
3.31.2 5 / 11
3.31.0 5 / 11
3.30.6 5 / 11
3.30.5 5 / 11
3.30.4 5 / 11
3.30.3 5 / 11
3.30.2 5 / 11
3.30.0 5 / 11
3.28.2 5 / 11
3.28.1 5 / 11
3.28.0 5 / 11
3.27.5 5 / 11
3.27.4 5 / 11
3.27.3 5 / 11
3.27.2 5 / 11
3.27.1 5 / 11
3.27.0 5 / 11
3.26.3 5 / 11
3.26.2 5 / 11
3.26.1 5 / 11
3.26.0 5 / 11
3.25.4 5 / 11
3.25.3 5 / 11
3.25.2 5 / 11
3.25.1 5 / 11
3.25.0 5 / 11
3.24.8 5 / 11
3.24.7 5 / 11
3.24.6 5 / 11
3.24.5 5 / 11
3.24.4 5 / 11
3.24.3 5 / 11
3.24.2 5 / 11
3.24.1 5 / 11
3.24.0 5 / 11
3.23.48 5 / 11
3.23.47 5 / 11
3.23.38 5 / 11
3.23.37 5 / 11
3.23.36 5 / 11
3.23.35 5 / 11
3.23.34 5 / 11
3.23.33 5 / 11
3.23.32 5 / 11
Showing 100 of 332 Next page →

v3.41.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.40.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.40.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.39.32

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.39.31

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.39.30

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.39.29

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.39.28

2 findings
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

INFO Publisher changed: christos-budibase → GitHub Actions (on 2026-07-08) provenance

[Accepted risk] This version was published by a different npm account than previous versions on 2026-07-08. This could indicate a legitimate maintainer transition or an account compromise.

v3.38.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.34.10

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.34.9

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.34.8

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.34.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.34.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.34.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.34.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.34.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.34.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.33.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.33.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.33.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.33.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.32.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.32.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.32.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.32.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.32.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.31.9

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.31.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.31.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.31.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.31.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.31.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.31.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.31.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.30.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.30.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.30.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.30.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.30.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.30.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.28.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.28.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.28.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.27.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.27.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.27.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.27.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.27.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.27.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.26.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.26.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.26.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.26.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.25.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.25.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.25.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.25.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.25.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.24.8

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.24.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.24.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.24.5

2 findings
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

INFO Publisher changed: shogunpurple → christos-budibase (on 2026-01-20) provenance

[Accepted risk] This version was published by a different npm account than previous versions on 2026-01-20. This could indicate a legitimate maintainer transition or an account compromise.

v3.24.4

2 findings
MEDIUM Publisher changed: shogunpurple → christos-budibase (on 2026-01-16, unremoved on npm for 182d) provenance

This version was published by a different npm account (christos-budibase) than the most recent previously approved version (shogunpurple) on 2026-01-16. It has since remained available on npm for 182 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.24.3

2 findings
MEDIUM Publisher changed: shogunpurple → christos-budibase (on 2026-01-15, unremoved on npm for 183d) provenance

This version was published by a different npm account (christos-budibase) than the most recent previously approved version (shogunpurple) on 2026-01-15. It has since remained available on npm for 183 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.24.2

2 findings
MEDIUM Publisher changed: shogunpurple → christos-budibase (on 2026-01-14, unremoved on npm for 184d) provenance

This version was published by a different npm account (christos-budibase) than the most recent previously approved version (shogunpurple) on 2026-01-14. It has since remained available on npm for 184 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.24.1

2 findings
MEDIUM Publisher changed: shogunpurple → christos-budibase (on 2026-01-13, unremoved on npm for 185d) provenance

This version was published by a different npm account (christos-budibase) than the most recent previously approved version (shogunpurple) on 2026-01-13. It has since remained available on npm for 185 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.24.0

2 findings
MEDIUM Publisher changed: shogunpurple → christos-budibase (on 2026-01-09, unremoved on npm for 189d) provenance

This version was published by a different npm account (christos-budibase) than the most recent previously approved version (shogunpurple) on 2026-01-09. It has since remained available on npm for 189 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.23.48

2 findings
MEDIUM Publisher changed: shogunpurple → christos-budibase (on 2026-01-07, unremoved on npm for 191d) provenance

This version was published by a different npm account (christos-budibase) than the most recent previously approved version (shogunpurple) on 2026-01-07. It has since remained available on npm for 191 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.23.47

2 findings
MEDIUM Publisher changed: shogunpurple → christos-budibase (on 2026-01-05, unremoved on npm for 193d) provenance

This version was published by a different npm account (christos-budibase) than the most recent previously approved version (shogunpurple) on 2026-01-05. It has since remained available on npm for 193 days without being unpublished, which is inconsistent with an account takeover — those are typically removed by npm shortly after discovery.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.23.38

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.23.37

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.23.36

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.23.35

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.23.34

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.23.33

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.23.32

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.