# adequate-little-templates > A minimal, CSP-safe templating language Latest version **1.0.2** (published 2026-01-10) · MIT license · 0 weekly downloads ## Install ```sh npm install adequate-little-templates pnpm add adequate-little-templates yarn add adequate-little-templates bun add adequate-little-templates ``` ## Health **Score 60/100 (C)** — status: stable. Positive: has types; esm support; no vulnerabilities; high quality score. Warnings: low downloads. ## Facts | | | |---|---| | Version | 1.0.2 | | Published | 2026-01-10 | | First published | 2026-01-08 | | Weekly downloads | 0 | | License | MIT | | TypeScript types | bundled | | Module format | ESM + CommonJS | | Node | >=14 | | Dependencies | 0 | | Unpacked size | 37.8 KB | | Known vulnerabilities | 0 | | Install scripts | no | | GitHub stars | 0 | | Author | Liam Bigelow | | Maintainers | bglw | | Keywords | template, templating, csp-safe, minimal, tiny | ## Links - npm: https://www.npmjs.com/package/adequate-little-templates - Repository: https://github.com/bglw/adequate-little-templates - Homepage: https://github.com/bglw/adequate-little-templates#readme - Issues: https://github.com/bglw/adequate-little-templates/issues - npm.io page: https://npm.io/package/adequate-little-templates ## Alternatives - [postcss-color-hex-alpha](https://npm.io/package/postcss-color-hex-alpha.md) — 6.4M weekly downloads - [randomcolor](https://npm.io/package/randomcolor.md) — 348.0K weekly downloads - [bows](https://npm.io/package/bows.md) — 1.3K weekly downloads - [ep_prefer_color_scheme](https://npm.io/package/ep_prefer_color_scheme.md) — 260 weekly downloads - [coc-yank](https://npm.io/package/coc-yank.md) — 61 weekly downloads ## Recent versions - 1.0.2 (latest) — 2026-01-10 - 1.0.1 — 2026-01-08 - 1.0.0 — 2026-01-08 ## README # Adequate Little Templates [![npm version](https://img.shields.io/npm/v/adequate-little-templates.svg)](https://www.npmjs.com/package/adequate-little-templates) A minimal, CSP-safe templating language. Unlike the micro templates I could find, this does not compile to a JavaScript function requiring `eval` or equivalent, so it will run in more contexts and be safer for untrusted input. Currently: ~3KB gzipped. ## Quick Start ```bash npm i adequate-little-templates ``` ```javascript import { render, compile, registerFunction } from 'adequate-little-templates'; // One-shot render render('Hello {{ name }}!', { name: 'World' }); // -> "Hello World!" // Compile for reuse const template = compile('Hello {{ name }}!'); template({ name: 'World' }); // -> "Hello World!" template({ name: 'Again' }); // -> "Hello Again!" ``` ## Syntax ### Variable Interpolation Output values, HTML escaped: ```handlebars {{ title }} {{ meta.author }} {{ deeply.nested.value }} ``` ### Raw Output Output without HTML escaping (for trusted HTML like highlighted excerpts): ``` {{+ excerpt +}} {{+ meta.description +}} ``` ### Pipes and Functions Transform values with pipes: ```handlebars {{ title | lowercase }} {{ title | uppercase }} {{ title | truncate(50) }} {{ title | truncate(50, "…") }} {{ name | lowercase | truncate(20) }} ``` Or use function call syntax: ```handlebars {{ truncate(title, 50) }} {{ replace(title, "foo", "bar") }} ``` Pipes are sugar for function calls. These are equivalent: ```handlebars {{ title | truncate(50) }} {{ truncate(title, 50) }} ``` ### Conditionals ```handlebars {{#if author}} By {{ author }} {{/if}} {{#if image}} {{:else}}
{{/if}} {{#if eq(status, "published")}} Published {{:else if eq(status, "draft")}} Draft {{:else}} Unknown {{/if}} ``` ### Iteration ```handlebars {{#each items as item}}
  • {{ item.name }}
    • {{/each}} {{#each items as item, index}}
  • {{ index }}: {{ item.name }}
    • {{/each}} {{#each items as item}}
  • {{ item }}
    • {{:else}}
  • No items found
    • {{/each}} {{#each items | limit(3) as item}}
  • {{ item.name }}
    • {{/each}} ``` ### Escaping Delimiters Output literal `{{` with a backslash: ```handlebars \{{ this is not a template tag }} ``` ## Built-in Functions ### Comparison | Function | Description | |----------|-------------| | `eq(a, b)` | Equal | | `ne(a, b)` | Not equal | | `gt(a, b)` | Greater than | | `lt(a, b)` | Less than | | `gte(a, b)` | Greater than or equal | | `lte(a, b)` | Less than or equal | ### Boolean | Function | Description | |----------|-------------| | `and(a, b, ...)` | Logical AND | | `or(a, b, ...)` | Logical OR | | `not(a)` | Logical NOT | ### String | Function | Description | |----------|-------------| | `lowercase(s)` | Convert to lowercase | | `uppercase(s)` | Convert to uppercase | | `trim(s)` | Remove leading/trailing whitespace | | `truncate(s, n)` | Truncate to n chars with "..." | | `truncate(s, n, suffix)` | Truncate with custom suffix | | `replace(s, find, rep)` | Replace all occurrences | ### Array | Function | Description | |----------|-------------| | `limit(arr, n)` | Take first n items | | `first(arr)` | First item | | `last(arr)` | Last item | | `length(arr)` | Array (or string) length | | `join(arr, sep)` | Join with separator | ### Misc | Function | Description | |----------|-------------| | `default(val, fallback)` | Use fallback if val is falsy | | `safeUrl(url)` | Sanitize URL, blocking dangerous protocols | ### URL Sanitization Use `safeUrl` to protect against `javascript:` and other dangerous URL schemes when rendering user-provided URLs: ```handlebars {{ title }} ``` Allowed: - Relative URLs: `/path`, `./path`, `../path`, `?query`, `#hash` - HTTP(S): `https://example.com` - FTP: `ftp://example.com/file.txt` - Email: `mailto:user@example.com` - Phone: `tel:+1234567890` Blocked (returns empty string): - `javascript:alert('xss')` - `data:text/html,...` - `vbscript:...` - Any other protocol ## Custom Functions Register your own functions: ```javascript import { registerFunction, render } from 'adequate-little-templates'; registerFunction('double', (n) => n * 2); registerFunction('formatDate', (ts) => new Date(ts).toLocaleDateString()); registerFunction('pluralize', (count, singular, plural) => count === 1 ? singular : plural ); render('{{ double(5) }}', {}); // -> "10" render('{{ count }} {{ pluralize(count, "item", "items") }}', { count: 3 }); // -> "3 items" // Works with pipes too render('{{ num | double }}', { num: 21 }); // -> "42" ``` ## Truthiness The following values are **falsy**: - `null` - `undefined` - `false` - `0` - `""` (empty string) - `NaN` - `[]` (empty array) - `{}` (empty object) Everything else is **truthy**. ## Error Handling Errors render inline for easy debugging: ```text [Error: use #each for arrays] [Error: cannot render object] [Error: unknown foo()] [Error: #each needs array] [Error: join() needs 2 args] ``` ## API ### Functions ```typescript render(template: string, data: TemplateData): string ``` Parse and render a template in one step. ```typescript compile(template: string): Template ``` Parse a template and return a reusable render function. Use this when rendering the same template multiple times. ```typescript registerFunction(name: string, fn: CustomFn): void ``` Register a custom function for use in templates. ### TypeScript If you need explicit type annotations, all types are exported: ```typescript import { render, TemplateData, Value, Template, CustomFn } from 'adequate-little-templates'; const data: TemplateData = { title: 'Hello', count: 42 }; const myFn: CustomFn = (a, b) => Number(a) + Number(b); ``` --- _Source: https://npm.io/package/adequate-little-templates · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._