lgtm,codescanning
* More template engines are recognized as sinks for the `js/code-injection` query.
  Affected packages are
    [mustache](https://npmjs.com/package/mustache),
    [handlebars](https://npmjs.com/package/handlebars),
    [dot](https://npmjs.com/package/dot),
    [hogan.js](https://npmjs.com/package/hogan.js)
    [eta](https://npmjs.com/package/eta),
    [squirrelly](https://npmjs.com/package/squirrelly),
    [whiskers](https://npmjs.com/package/whiskers)