Quilzo
Immutable, content-addressed CMS with an agent interface that enforces a manifest. Publishing moves a pointer; the template language cannot execute anything. Go, zero dependencies, AGPL-3.0.
Description excerpted from the original listing, which is linked below.