microcosm-cc/bluemonday
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
License & maintenance
BSD-3-Clause is a permissive license: free to use commercially with attribution.
Last code push 18 months ago.