htmlparser2

Project backingcaution

The repository is owned by a user account rather than an organization, so the single registry maintainer provides limited visible handoff capacity; this is partly offset by two active recent contributors.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, which is a limited sample, but it still shows activity rather than a complete collapse.

Workflow auditcaution

All four workflows were analyzed and no untrusted checkout or script-injection sink was found. However, the audit reports a high-confidence bot-condition finding in the Dependabot automerge workflow, plus all 10 action references are unpinned; the low-confidence cache-poisoning finding is only a hygiene concern.