SSI is still the perfect balance of just enough power to do templating with .html fragments with a minimal attack surface and no maintainence from version churn. It's stable, it's tested, it's left alone. It's in most major webservers as a core module. It's as good now as it was in 1998.