"built using the defusedxml package" is misleading
tomchristie opened this issue · comments
defusedxml is a requirement, but only because it safeguards against some security issues that were discovered. Think the wording need a little tweaking - should prob just be noting defusedxml in the requirements rather than calling it out up-front in the description.