
Security News
Nx npm Packages Compromised in Supply Chain Attack Weaponizing AI CLI Tools
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
@divvit/html-data-to-pdf-utils
Advanced tools
country common function like: countryList, timeZone for Country, Currency...
Simple and lightweight HTML to text conversion using Node and PhantomJS.
npm install @divvit/html-data-to-pdf-utils
The API exposes a single function 'convert'. Using this function, you can input a multitude of settings, which are further specified below:
var pdf = require('@divvit/html-data-to-pdf-utils');
pdf.convert(options, function(result) {
/* Using a buffer and callback */
result.toBuffer(function(returnedBuffer) {});
/* Using a readable stream */
var stream = result.toStream();
/* Using the temp file path */
var tmpPath = result.getTmpPath();
/* Using the file writer and callback */
result.toFile("/path/to/file.pdf", function() {});
});
Calling convert() requires an options object, which includes the following definitions:
{
"html" : "Path to HTML file",
"data" : "Json data passer in html file",
"css" : "Path to additional CSS file",
"js" : "Path to additional JavaScript file",
"runnings" : "Path to runnings file. Check further below for explanation.",
"paperSize" : "Two ways to do this, see below",
"deleteOnAction" : "true/false (Deletes the created temp file once you access it via toBuffer() or toFile())"
}
Instead of paths, one can also provide properly escaped source code.
Either supply a paper format, orientation and border (this is the default)
{format: 'A4', orientation: 'portrait', border: '1cm'}
Or supply a page width, height and border.
{width: '3in', height: '2in', border: '0.5in'}
See link below for accepted units and formats
npm test
Anh Nguyen, Nino Ulsamer, Divvit AB
FAQs
country common function like: countryList, timeZone for Country, Currency...
We found that @divvit/html-data-to-pdf-utils demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.