libexpat - XML parsing library libexpat is in base, but not enabled yet. why? paranoia many reasons to do it: in X11 and ports it's duplicated now been talking about someone auditing (many integer overflows, etc.) niallo and mbalmer did basic audit this week should be enabled soon