npmpackage.info

Gathering detailed insights and metrics for pdfjs-dist

Other packages similar to pdfjs-dist

@types/pdfjs-dist

2.10.378

Stub TypeScript definitions entry for pdfjs-dist, which provides its own types definitions

pdfjs-dist-sign

2.5.208

Generic build of Mozilla's PDF.js library.

@bundled-es-modules/pdfjs-dist

3.6.172-alpha.1

mirror of pdfjs-dist, bundled and exposed as ES module

pdfjs-dist-sig

2.6.4

Generic build of Mozilla's PDF.js library.

pdfjs-dist

PDF Reader in JavaScript

4.10.38

49,339

Apache-2.0

JavaScript

95.04 kB

405,716,739 8.3

Installations

npm install pdfjs-dist

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS, UMD

Min. Node Version

>=20

Node Version

22.12.0

NPM Version

10.9.0 Score

74.5

Supply Chain

76.7

Quality

91.3

Maintenance

100

Vulnerability

86.9

License

Pull Requests

Open

29

Total

8,907

Closed

1,207

Merged

7,671

Issues

Open

377

Total

10,027

Closed

9,650

Releases

v4.10.38

Published on 01 Jan 2025

v4.9.155

Published on 05 Dec 2024

v4.9.124

Published on 01 Dec 2024

v4.8.69

Published on 02 Nov 2024

v4.7.76

Published on 06 Oct 2024

v4.6.82

Published on 01 Sept 2024

View all 70 releases

Contributors

390

View all 390 contributors

Languages

JavaScript

Fluent

CSS

HTML

TypeScript

JavaScript (72.62%)

Fluent (24.64%)

CSS (1.81%)

HTML (0.91%)

TypeScript (0.02%)

Developer

mozilla

Download Statistics

Total Downloads

405,716,739

Last Day

230,776

Last Week

1,398,712

Last Month

11,065,721

Last Year

139,169,175

GitHub Statistics

49,339 Stars

20,147 Commits

10,108 Forks

1,121 Watching

1 Branches

390 Contributors

Bundle Size

328.50 kB

Minified

95.04 kB

Minified + Gzipped

Bundlephobia

Maintainers

Package Meta Information

Latest Version

4.10.38

Package Id

pdfjs-dist@4.10.38

Unpacked Size

35.62 MB

Size

9.87 MB

File Count

355

NPM Version

10.9.0

Node Version

22.12.0

Publised On

01 Jan 2025

Total Downloads

Cumulative downloads

Total Downloads

405,716,739

Last day

-16.6%

230,776

Compared to previous day

Last week

-43%

1,398,712

Compared to previous week

Last month

-6.7%

11,065,721

Compared to previous month

Last year

38.7%

139,169,175

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Optional Dependencies

@napi-rs/canvas

Versions

PDF.js

PDF.js is a Portable Document Format (PDF) library that is built with HTML5. Our goal is to create a general-purpose, web standards-based platform for parsing and rendering PDFs.

This is a pre-built version of the PDF.js source code. It is automatically generated by the build scripts.

For usage with older browsers/environments, without native support for the latest JavaScript features, please see the legacy/ folder. Please see this wiki page for information about supported browsers/environments.

See https://github.com/mozilla/pdf.js for learning and contributing.

Stable Version

4.10.38

HIGH

8.8/10

Summary

Malicious PDF can inject JavaScript into PDF Viewer

Affected Versions

< 1.10.100

Patched Versions

1.10.100

HIGH

8.8/10

Summary

Malicious PDF can inject JavaScript into PDF Viewer

Affected Versions

>= 2.0.0, < 2.0.550

Patched Versions

2.0.550

HIGH

0/10

Summary

PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF

Affected Versions

<= 4.1.392

Patched Versions

4.2.67

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Maintained

Determines if the project is "actively maintained".

10

Security-Policy

Determines if the project has published a security policy.

10

License

Determines if the project has defined a license.

10

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

10

Packaging

Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

SAST

Determines if the project uses static code analysis.

10

Fuzzing

Determines if the project uses fuzzing.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

9

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

2

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 2

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/mozilla/pdf.js/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/mozilla/pdf.js/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/mozilla/pdf.js/codeql.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/mozilla/pdf.js/codeql.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/mozilla/pdf.js/codeql.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/mozilla/pdf.js/codeql.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fluent_linter.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/mozilla/pdf.js/fluent_linter.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/fluent_linter.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/mozilla/pdf.js/fluent_linter.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/font_tests.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/mozilla/pdf.js/font_tests.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/font_tests.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/mozilla/pdf.js/font_tests.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/font_tests.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/mozilla/pdf.js/font_tests.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/mozilla/pdf.js/lint.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/mozilla/pdf.js/lint.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/mozilla/pdf.js/publish_release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_release.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/mozilla/pdf.js/publish_release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_website.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/mozilla/pdf.js/publish_website.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_website.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/mozilla/pdf.js/publish_website.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_website.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/mozilla/pdf.js/publish_website.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_website.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/mozilla/pdf.js/publish_website.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/types_tests.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/mozilla/pdf.js/types_tests.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/types_tests.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/mozilla/pdf.js/types_tests.yml/master?enable=pin
Warn: pipCommand not pinned by hash: .github/workflows/fluent_linter.yml:38
Warn: pipCommand not pinned by hash: .github/workflows/font_tests.yml:59
Info: 0 out of 21 GitHub-owned GitHubAction dependencies pinned
Info: 6 out of 6 npmCommand dependencies pinned
Info: 0 out of 2 pipCommand dependencies pinned

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Signed-Releases

Determines if the project cryptographically signs release artifacts.

Score

8.3

/10

Last Scanned on 2025-01-06

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More