The Phug renderer get pug string or a pug file then return a markup string.
Install via Composer
composer require phug/renderer
$renderer = new Phug\Renderer($options);
$html = $renderer->render($pugInput);
//$html is now a string of HTML or any other markup according to the formatter you choose (XML, xHTML, etc.)
To report a security vulnerability, please use the Tidelift security contact. Tidelift will coordinate the fix and disclosure.