
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
react-pdf-editor
Advanced tools
React PDF Editor is a React library developed with Vite, leveraging the capabilities of [PDF.js](https://mozilla.github.io/pdf.js/) and [pdf-lib](https://github.com/Hopding/pdf-lib.git) for enhanced functionality.
React PDF Editor is a React library developed with Vite, leveraging the capabilities of PDF.js and pdf-lib for enhanced functionality.
PDF.js ensures precise rendering of PDFs using the Canvas API. Typically, PDFs serve as final publishing formats, but they can also function as entry forms. However, when used as entry forms, the rendered pages by PDF.js limit user interaction.
Notably, users can interact with PDF forms when rendered by the browser's built-in PDF plugin extension. However, relying on the browser extension introduces a drawback — your React app lacks a mechanism to collect the form data edited by users for further utilization within the application.
React PDF Editor addresses this limitation, providing a solution tailored for PDFs used as entry forms. It enables users to seamlessly edit and save form fields within the PDF, ensuring compatibility with any React application while overcoming the data collection challenge associated with browser extensions.
npm install react-pdf-editor
import React from "react"
import ReactDOM from "react-dom/client"
// import styles of react-pdf-editor only once
import "react-pdf-editor/dist/style.css"
import PDFEditor from "react-pdf-editor"
ReactDOM.createRoot(document.getElementById("root")!).render(
<React.StrictMode>
<PDFEditor src="/form.pdf" />
</React.StrictMode>,
);
Prop | Type | Comments |
---|---|---|
src | string | URL | TypedArray | ArrayBuffer | DocumentInitParameters , required | Can be a URL where a PDF file is located, a typed array (Uint8Array) already populated with data, or a parameter object. |
workerSrc | string , optional | A string containing the path and filename of the worker file. use pdf.worker.min.mjs CDN by default if not set. |
onSave | (pdfBytes: Uint8Array, formFields: PDFFormFields) => void , optional | a callback function that allows you to handle the save functionality when the user interacts with the save button. This callback is triggered when the user initiates a save action. If the onSave prop is not set, the save button will function similarly to the 'Save as' button in a browser's internal PDF extension. The default behavior is to trigger the browser's download functionality, allowing the user to save the PDF file to their local machine. |
interface PDFFormFields { [x: string]: string; }
, the edited form dataexample
import PDFEditor, { PDFEditorRef } from "react-pdf-editor"
const App = () => {
const ref = useRef<PDFEditorRef>(null);
ref.current?.formFields;
return <PDFEditor src="/form.pdf" ref={ref} />
}
Clone the repository:
git clone https://github.com/lengerrong/react-pdf-editor.git
cd react-pdf-editor
Install dependencies:
npm install
Start the development server:
npm run dev
Open your browser and go to http://localhost:5173 to see the example.
PDF.js is a Portable Document Format (PDF) viewer that is built with HTML5.
pdf-lib Create and modify PDF documents in any JavaScript environment.
For any questions, issues, or feature requests, please open an issue.
FAQs
React PDF Editor is a React library developed with Vite, leveraging the capabilities of [PDF.js](https://mozilla.github.io/pdf.js/) and [pdf-lib](https://github.com/Hopding/pdf-lib.git) for enhanced functionality.
The npm package react-pdf-editor receives a total of 101 weekly downloads. As such, react-pdf-editor popularity was classified as not popular.
We found that react-pdf-editor demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.