defusedxml
Protects Python XML parsing from billion laughs and other XML bomb attacks.
Auth and security libraries PyPI PSFL
Used in agent projects
24
0.2% of 12,697 public repos built with AI coding agents
Rank in auth and security libraries
#42 of 47
by use in those projects
Downloads
52.3M
PyPI, last 7 days, defusedxml
GitHub stars
555
last push Sep 3, 2024
How defusedxml is used
defusedxml is a dependency in 24 of the 12,697 public GitHub projects set up for AI coding agents that we scanned (0.2%), #42 of 47 in auth and security libraries. The most used alternative there is NextAuth.js. Projects that use it most often also use PyYAML (87.5%), Requests (83.3%), Jinja2 (79.2%).
Often used with defusedxml
| PyYAML | 87.5% of defusedxml projects · 28.9× more than average |
|---|---|
| Requests | 83.3% of defusedxml projects · 15.7× more than average |
| Jinja2 | 79.2% of defusedxml projects · 57.4× more than average |
| jsonschema | 79.2% of defusedxml projects · 77.9× more than average |
| NumPy | 79.2% of defusedxml projects · 20.6× more than average |
| Pydantic | 79.2% of defusedxml projects · 15.5× more than average |
| python-dateutil | 75.0% of defusedxml projects · 57.7× more than average |
| attrs | 70.8% of defusedxml projects · 70.3× more than average |
By coding agent
| Claude Code | 0.3% of projects set up for it |
|---|---|
| GitHub Copilot | 0.3% of projects set up for it |
| Cursor | 0.3% of projects set up for it |
Share of public repos configured for each agent that list defusedxml as a dependency.
Install
| Package | pip install defusedxml |
|---|---|
| Main stacks | Python (22), Next.js (2) |
| Example projects | microsoft/edge-ai, loblawbob873-svg/posterchanai, AndreAugusto11/XChainDataGen, u9401066/med-paper-assistant, ManojINaik/manimAnimationAgent |
Alternatives to defusedxml
| Tool | Used in agent projects | Downloads / wk | GitHub stars | License |
|---|---|---|---|---|
| NextAuth.js npm Complete open-source authentication solution designed for Next.js applications. |
266 (2.1%) | 6.7M | 28.4K | ISC |
| bcryptjs npm Pure JavaScript bcrypt implementation for secure password hashing without dependencies. |
256 (2.0%) | 14.7M | 3,797 | BSD-3-Clause |
| jsonwebtoken npm Create, verify and decode JSON Web Tokens for authentication and secure data transmission. |
241 (1.9%) | 59.3M | 18.2K | MIT |
| cryptography pypi Python library providing cryptographic recipes and primitives for secure applications. |
213 (1.7%) | 281M | 7,803 | — |
| jose npm Comprehensive JWT and JWK handling for Node.js and web runtimes. |
141 (1.1%) | 151M | 7,824 | MIT |
| PyJWT pypi Python library for encoding and decoding JSON Web Tokens. |
128 (1.0%) | 154M | 5,714 | — |
| Better Auth npm Comprehensive authentication framework for TypeScript with multiple strategies. |
126 (1.0%) | 11.4M | 30.2K | MIT |
| Helmet npm Express middleware that sets HTTP security headers to prevent vulnerabilities. |
125 (1.0%) | 16.2M | 10.7K | MIT |