@imgly/pdfjs-dist
Advanced tools
@imgly/pdfjs-distThis is the IMG.LY fork of pdfjs-dist,
the npm distribution of Mozilla's pdf.js.
It exists to surface a small set of additional fields on PDFPageProxy
(page boxes, Separation/DeviceN color spaces, raw CMYK fills) that
@imgly/pdf-importer
needs and that upstream pdf.js does not expose.
The patch surface is intentionally narrow: only src/display/api.js,
src/core/evaluator.js, src/core/document.js, and src/core/worker.js
are modified. Public, non-patched APIs match upstream pdfjs-dist of
the same upstream version exactly.
Versions follow <upstream>-imgly.<rev>, e.g. 4.10.38-imgly.1. Pin
exactly — semver caret (^) does not select prerelease versions, so
^4.10.38-imgly.1 would silently fall through to upstream pdfjs-dist.
If you do not consume @imgly/pdf-importer or do not need the
fork-only API surface (PDFPageProxy.trimBox, bleedBox,
colorSpaceResources, imglyPatchVersion), use upstream
pdfjs-dist instead.
README.md.This package is published from the fork's imgly/v<upstream> release
branch via npx gulp dist. We do not accept external contributions to
the fork; report bugs in the underlying behavior to upstream pdf.js,
and bugs in the fork-specific patches via
https://github.com/imgly/pdf.js/issues.
Apache-2.0, inherited from upstream pdf.js. This is a modified fork.
FAQs
IMG.LY fork of pdfjs-dist with patches for @imgly/pdf-importer.
The npm package @imgly/pdfjs-dist receives a total of 474 weekly downloads. As such, @imgly/pdfjs-dist popularity was classified as not popular.
We found that @imgly/pdfjs-dist demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 13 open source maintainers collaborating on the project.
Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.
Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.