unpdf
PDF extraction and rendering across all JavaScript runtimes
45
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
johannschopplich
Keywords
cloudflareedgeextractparsepdfpdf.jspdfjs-distrenderingserverlesstext-extractionworkers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:canvas | AI (dependencies): canvas is an established graphics library; optional dependency for PDF rendering is appropriate for this package. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): canvas added as optional dependency for legitimate PDF rendering use case; not a supply-chain attack vector. | ai | |
| source-diff | source-size-tripled | AI (source-diff): 83x size increase reflects pdfjs-dist bundling; documented in build:pdfjs script and appropriate for this package's purpose. | ai | |
| source-diff | net-exec-file:dist/pdfjs.mjs | AI (source-diff): pdfjs-dist legitimately uses dynamic code patterns for PDF parsing; no malware indicators (credential theft, exfiltration, reverse shells) present. | ai | |
| source-diff | obfuscated-file:dist/pdfjs.mjs | AI (source-diff): dist/pdfjs.mjs is a minified build artifact from rollup bundling pdfjs-dist; minification is expected for build outputs. | ai | |
| source-diff | large-new-source-files | AI (source-diff): 64 new files reflect bundling of pdfjs-dist library; expected for PDF utility package. | ai | |
| provenance | publisher-changed | AI (provenance): unpdf migrated to GitHub Actions CI/CD publishing with SLSA Sigstore attestation; publisher=GitHub Actions is the expected and legitimate state for this unjs org package going forward. | ai | |
| source-diff | encoded-string-file:dist/pdfjs.mjs | AI (source-diff): Long encoded strings in dist/pdfjs.mjs are standard minified pdfjs-dist bundle output (PDF constants, enums, polyfills). No obfuscation or malicious content; stable for this package. | ai |
Versions (showing 45 of 45)
| Version | Deps | Published |
|---|---|---|
| 1.6.2 | 0 / 16 | |
| 1.6.1 | 0 / 16 | |
| 1.6.0 | 0 / 16 | |
| 1.5.1 | 0 / 16 | |
| 1.5.0 | 0 / 16 | |
| 1.4.0 | 0 / 18 | |
| 1.3.2 | 0 / 18 | |
| 1.3.1 | 0 / 18 | |
| 1.3.0 | 0 / 18 | |
| 1.2.2 | 0 / 18 | |
| 1.2.1 | 0 / 18 | |
| 1.2.0 | 0 / 18 | |
| 1.1.0 | 0 / 18 | |
| 1.0.6 | 0 / 18 | |
| 1.0.5 | 0 / 18 | |
| 1.0.4 | 0 / 18 | |
| 1.0.3 | 0 / 18 | |
| 1.0.2 | 0 / 20 | |
| 1.0.1 | 0 / 21 | |
| 1.0.0 | 0 / 21 | |
| 0.12.2 | 0 / 19 | |
| 0.12.1 | 0 / 19 | |
| 0.12.0 | 0 / 20 | |
| 0.11.0 | 0 / 20 | |
| 0.10.1 | 0 / 19 | |
| 0.10.0 | 0 / 19 | |
| 0.9.0 | 0 / 19 | |
| 0.8.0 | 0 / 19 | |
| 0.7.1 | 1 / 19 | |
| 0.7.0 | 1 / 19 | |
| 0.6.1 | 0 / 19 | |
| 0.6.0 | 0 / 19 | |
| 0.5.4 | 0 / 8 | |
| 0.5.3 | 0 / 8 | |
| 0.5.2 | 0 / 8 | |
| 0.5.1 | 0 / 8 | |
| 0.5.0 | 0 / 8 | |
| 0.4.1 | 0 / 8 | |
| 0.4.0 | 0 / 6 | |
| 0.3.0 | 0 / 6 | |
| 0.2.2 | 0 / 6 | |
| 0.2.1 | 0 / 6 | |
| 0.2.0 | 0 / 6 | |
| 0.1.1 | 0 / 6 | |
| 0.1.0 | 0 / 6 |