cheerio
The fast, flexible & elegant library for parsing and manipulating HTML and XML.
88%
Total Score
100
94
83
50
Health Score Breakdown
No build attestation or trusted-publisher identity is present, leaving the connection between source and published artifact less transparent. Repository tests, release notes, and active project tooling provide some compensating evidence but do not replace provenance.
The package runs a prepare install-time lifecycle script, which increases installation complexity and requires more trust than a package without install hooks.
The package is mature, with 75 releases since October 2011 and a median release interval of about 26 days, although only one release appeared in the last 12 months.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 parse5 Version ^7.3.0 | — | — |
undici Version ^7.19.0 | — | — |
domutils Version ^3.2.2 | — | — |
domhandler Version ^5.0.3 | — | — |
htmlparser2 Version ^10.1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 8 months ago
- Created
- 15 years ago
- Unpacked Size
- 1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.