Based on meeting with Fandom folks, they use this native Mustache interpreter:
https://github.com/jbboehr/php-mustache
And from Composer, the most well-known implementation for PHP:
https://github.com/bobthecow/mustache.php
This is a task to evaluate performance of mustache.php and php-mustache, compared to our current approach with LightNCandy which is a big compromise right now both in terms of security and in terms of performance.
The way we currently use the LightNCandy library (with PHP eval, and code stored in a cache) is also contrary to the upstream recommendations, and contrary to the benchmark in RFC: HTML Templating, which means the this library was a compromise (over the more well-known mustache.php package) for a benefit that we didn't get.