npmpackage.info

Gathering detailed insights and metrics for htmlparser2-without-node-native

htmlparser2-without-node-native - 3.9.2 | npmpackage.info

htmlparser2-without-node-native

The fast & forgiving HTML and XML parser

3.9.2

4,613

MIT

TypeScript

6.9

Installations

npm install htmlparser2-without-node-native

Developer Guide

BETA

Typescript

No

Module System

CommonJS, UMD

Node Version

6.9.2

NPM Version

3.10.9 Pull Requests

Open

7

Total

1,870

Closed

352

Merged

1,511

Issues

Open

13

Total

309

Closed

296

Releases

v10.0.0

Updated on Dec 24, 2024

v9.1.0

Updated on Jan 05, 2024

v9.0.0

Updated on May 10, 2023

v8.0.2

Updated on Mar 22, 2023

v8.0.1

Updated on Apr 29, 2022

v8.0.0

Updated on Apr 23, 2022

View All 19 releases

Languages

TypeScript

HTML

JavaScript

TypeScript (98.71%)

HTML (1.1%)

JavaScript (0.19%)

Developer

fb55

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

MIT License

4,613 Stars

2,226 Commits

393 Forks

49 Watchers

11 Branches

57 Contributors

Updated on Jul 15, 2025

Maintainers

View All 57 Contributors

Package Meta Information

Latest Version

3.9.2

Package Id

htmlparser2-without-node-native@3.9.2

Size

9.58 kB

NPM Version

3.10.9

Node Version

6.9.2

Published on

Sep 20, 2017

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

domelementtype domhandler domutils entities eventemitter2 inherits readable-stream

Dev Dependencies

coveralls istanbul mocha eslint mocha-lcov-reporter

htmlparser2-without-node-native

htmlparser2 build that excludes node native modules so that you can use it in platforms like React Native.

Remove Stream and WritableStream.
Use eventemitter2 instead of native events.

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Maintained

Determines if the project is "actively maintained".

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Security-Policy

Determines if the project has published a security policy.

10

License

Determines if the project has defined a license.

10

SAST

Determines if the project uses static code analysis.

7

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

4

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 4

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/fb55/htmlparser2/codeql-analysis.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/fb55/htmlparser2/codeql-analysis.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/fb55/htmlparser2/codeql-analysis.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-automerge.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/fb55/htmlparser2/dependabot-automerge.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs-test.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/fb55/htmlparser2/nodejs-test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs-test.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/fb55/htmlparser2/nodejs-test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs-test.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/fb55/htmlparser2/nodejs-test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs-test.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/fb55/htmlparser2/nodejs-test.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/nodejs-test.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/fb55/htmlparser2/nodejs-test.yml/master?enable=pin
Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 2 third-party GitHubAction dependencies pinned
Info: 2 out of 2 npmCommand dependencies pinned

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

Score

6.9

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More