I got the same while testing node-cheerio (ITP: https://bugs.debian.org/848315).
The domhandler dependency is indeed listed in the current upstream's package.json. Upgrading node-htmlparser2 from 3.7.3 to 3.9.2 would force us to package domhandler and domutils, and the latter's dependency node-dom-serializer. And I assume this bug would be fixed. BTW while updating we could also add debian/watch to this one ... Paolo