pug3.0.x is still unsupported yet.
I'm wondering when this project can be up-to-date...

For those interested, I've published a (fork) package with updated dependencies: @anduh/pug-cli

It contains the changes @borisovg did in #88, and I changed it's command to pug3, so you can have both pug-cli (using pug) & @anduh/pug-cli (using pug3) installed at the same time, without conflicting commands.

I like using pug, but the fact that the pug-cli is outdated and has major security issues is a total detractor from using it. It doesn't lead to confidence that the project is going to be well maintained in the future. It's especially frustrating that there are people in the community who are submitting patches that update / fix it that are being ignored: to the point where they have to fork it like @Anduh did. Please at least let the community maintain it!

Yeah, let the community maintain it. It's already 6 months since I published the fork, and been happily using it instead.

Guess I should take a look at the open PRs and see what to merge, so there is improvement beyond just updated deps.

Yeah @Anduh agreed. Thanks for your work on it. I've been using your fork on my last project and have been enjoying it. Pug is a great templating language and a CLI compiler is essential IMHO for a templating language to thrive. Please @ForbesLindesay can you make the CLI a community project, or at least stay up to date accepting patches. Pretty pretty please!