defusedexpat (pypi): XML bomb protection with modified expat parser
Keywords: xml|expat