Generated on May 15, 2024 via pnpm

Npm

react-pdf 5.7.0

Display PDFs in your React app as easily as if they were images.

pdf

pdf-viewer

react

Package summary

issues

licenses

Package created

30 Sep 2014

Version published

27 Jan 2022

Maintainers

Total deps

101

Direct deps

License

MIT

Issues

4 high severity issues

high

react-pdf@5.7.0

react-pdf vulnerable to arbitrary JavaScript execution upon opening a malicious PDF with PDF.js

Recommendation: Upgrade to version 7.7.3 or later

via: react-pdf@5.7.0

pdfjs-dist@2.12.313

PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF

Recommendation: Upgrade to version 4.2.67 or later

via: pdfjs-dist@2.12.313

react-pdf@5.7.0

react-pdf vulnerable to arbitrary JavaScript execution upon opening a malicious PDF with PDF.js

Recommendation: Upgrade to version 7.7.3 or later

via: react-pdf@5.7.0

caniuse-lite@1.0.30001618

Package uses an atypical license ("CC-BY-4.0")

Recommendation: Read and validate the license terms

via: file-loader@6.2.0

Collapse

Expand

1 low severity issue

low

caniuse-lite@1.0.30001618

Package uses a license that is not OSI approved ("CC-BY-4.0")

Recommendation: Read and validate the license terms

via: file-loader@6.2.0

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

84 Packages, Including:

@babel/runtime@7.24.5

@jridgewell/gen-mapping@0.3.5

@jridgewell/resolve-uri@3.1.2

@jridgewell/set-array@1.2.1

@jridgewell/source-map@0.3.6

@jridgewell/sourcemap-codec@1.4.15

@jridgewell/trace-mapping@0.3.25

@types/eslint-scope@3.7.7

@types/eslint@8.56.10

@types/estree@1.0.5

@types/json-schema@7.0.15

@types/node@20.12.12

@webassemblyjs/ast@1.12.1

@webassemblyjs/floating-point-hex-parser@1.11.6

@webassemblyjs/helper-api-error@1.11.6

@webassemblyjs/helper-buffer@1.12.1

@webassemblyjs/helper-numbers@1.11.6

@webassemblyjs/helper-wasm-bytecode@1.11.6

@webassemblyjs/helper-wasm-section@1.12.1

@webassemblyjs/ieee754@1.11.6

@webassemblyjs/utf8@1.11.6

@webassemblyjs/wasm-edit@1.12.1

@webassemblyjs/wasm-gen@1.12.1

@webassemblyjs/wasm-opt@1.12.1

@webassemblyjs/wasm-parser@1.12.1

@webassemblyjs/wast-printer@1.12.1

acorn-import-assertions@1.9.0

acorn@8.11.3

ajv-keywords@3.5.2

ajv@6.12.6

big.js@5.2.2

browserslist@4.23.0

buffer-from@1.1.2

chrome-trace-event@1.0.3

commander@2.20.3

emojis-list@3.0.0

enhanced-resolve@5.16.1

es-module-lexer@1.5.2

escalade@3.1.2

events@3.3.0

fast-deep-equal@3.1.3

fast-json-stable-stringify@2.1.0

file-loader@6.2.0

has-flag@4.0.0

jest-worker@27.5.1

js-tokens@4.0.0

json-parse-even-better-errors@2.3.1

json-schema-traverse@0.4.1

json5@2.2.3

loader-runner@4.3.0

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

7 Packages, Including:

eslint-scope@5.1.1

esrecurse@4.3.0

estraverse@4.3.0

estraverse@5.3.0

glob-to-regexp@0.4.1

terser@5.31.0

uri-js@4.4.1

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

3 Packages, Including:

@webassemblyjs/leb128@1.11.6

@xtuc/long@4.2.2

pdfjs-dist@2.12.313

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

@xtuc/ieee754@1.2.0

serialize-javascript@6.0.2

source-map@0.6.1

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

3 Packages, Including:

electron-to-chromium@1.4.769

graceful-fs@4.2.11

picocolors@1.0.1

Creative Commons Attribution 4.0 International

Uncategorized

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

caniuse-lite@1.0.30001618

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of react-pdf 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
@babel/runtime	7.24.5	256.12 kB	MIT	prod
file-loader	6.2.0	9.82 kB	MIT	prod	1 1
make-cancellable-promise	1.3.2	3.25 kB	MIT	prod
make-event-props	1.6.2	7.68 kB	MIT	prod
merge-class-names	1.4.2	2.62 kB	MIT	prod
merge-refs	1.3.0	10.08 kB	MIT	prod
pdfjs-dist	2.12.313	9.36 MB	Apache-2.0	prod	1
prop-types	15.8.1	22.12 kB	MIT	prod
react-dom	18.3.1	4.3 MB	MIT	prod peer
react	18.3.1	310.65 kB	MIT	prod peer
tiny-invariant	1.3.3	14.46 kB	MIT	prod
tiny-warning	1.0.3	3.66 kB	MIT	prod