htmlparser2
Fast & forgiving HTML/XML parser
51
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
fb55
Keywords
htmlparserstreamsxmldomrssfeedatom
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-takeover | AI (maintainer-change): fb55 is Felix Boehm, the original author of htmlparser2 (repo: github.com/fb55/htmlparser2, author email: [email protected]). feedic is also his npm account. Same person, different handle — not a hostile takeover. | ai | |
| provenance | publisher-changed | AI (provenance): Publisher changed to GitHub Actions with SLSA provenance attestation. fb55 is the original author; CI-based publishing with Sigstore attestation is a stronger integrity signal than manual publish. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): fb55 is Felix Boehm, the original creator of htmlparser2. Adding his primary GitHub-linked npm account is expected and benign. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): feedic (removed) and fb55 (added) are both Felix Boehm's accounts. Consolidation to a single account is benign. | ai |
Versions (showing 51 of 80)
| Version | Deps | Published |
|---|---|---|
| 12.0.0 | 4 / 8 | |
| 11.0.0 | 4 / 8 | |
| 10.1.0 | 4 / 13 | |
| 10.0.0 | 4 / 12 | |
| 9.1.0 | 4 / 12 | |
| 9.0.0 | 4 / 12 | |
| 8.0.2 | 4 / 12 | |
| 8.0.1 | 4 / 10 | |
| 8.0.0 | 4 / 10 | |
| 7.2.0 | 4 / 10 | |
| 7.1.2 | 4 / 10 | |
| 7.1.1 | 4 / 10 | |
| 7.1.0 | 4 / 10 | |
| 7.0.0 | 4 / 10 | |
| 6.1.0 | 4 / 10 | |
| 6.0.1 | 4 / 10 | |
| 6.0.0 | 4 / 10 | |
| 5.0.1 | 4 / 10 | |
| 5.0.0 | 4 / 10 | |
| 4.1.0 | 4 / 11 | |
| 4.0.0 | 4 / 11 | |
| 3.10.1 | 6 / 5 | |
| 3.10.0 | 6 / 5 | |
| 3.9.2 | 6 / 5 | |
| 3.9.1 | 6 / 5 | |
| 3.9.0 | 5 / 6 | |
| 3.8.3 | 5 / 6 | |
| 3.8.2 | 5 / 6 | |
| 3.8.1 | 5 / 6 | |
| 3.8.0 | 5 / 6 | |
| 3.7.3 | 5 / 5 | |
| 3.7.2 | 5 / 5 | |
| 3.7.1 | 5 / 5 | |
| 3.7.0 | 5 / 5 | |
| 3.6.0 | 4 / 2 | |
| 3.5.1 | 4 / 1 | |
| 3.5.0 | 4 / 1 | |
| 3.4.0 | 4 / 1 | |
| 3.3.0 | 4 / 1 | |
| 3.2.5 | 4 / 1 | |
| 3.2.4 | 4 / 1 | |
| 3.2.3 | 4 / 0 | |
| 3.2.2 | 4 / 0 | |
| 3.2.1 | 4 / 0 | |
| 3.2.0 | 4 / 0 | |
| 3.1.6 | 4 / 0 | |
| 3.1.5 | 4 / 0 | |
| 3.1.4 | 4 / 0 | |
| 3.1.3 | 4 / 0 | |
| 3.1.2 | 4 / 0 | |
| 3.1.1 | 4 / 0 |
v10.0.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.