github.com / inikulin

inikulin/parse5

TypeScript·180 files·commit be16d3e·scanned 18h ago·cached ✓

4/100

SAFE

No malicious patterns found. Repo signals are consistent with a legitimate project.

verdict accurate?

44% file coverage

threat-state: safelive

FINDINGS ░▒▓

infoAuthor has no other public repositoriesGitHub user "dependabot[bot]" has no other public repositories, common for burner accounts used in scams.+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

79 files scanned @ be16d3e | 10/29/2026 | heuristic scan — always review manually

risk by category

code execution0

network & exfiltration0

file system access0

obfuscation0

supply chain2

owasp / injection0

telemetry

files 79/180rules hit 1engine v7commit be16d3e

github

inikulin/parse5

HTML parsing/serialization toolset for Node.js. WHATWG HTML Living Standard (aka HTML5)-compliant.

TypeScript

3941

264

4973d

180 files

79 scanned(44%)

be16d3e

architecture░▒▓

entry (0) flagged (0) pkg (29)

82 nodes · 181 edgesscroll to zoom · click node to jump to finding