
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Render URLs or HTML to a PDF or take a screenshot.
Can be used for generating bills, protocols, lists, etc. from a website.
url2pdf3 is the official successor of url2pdf-plus, with the following advantages7
npm install url2pdf3 --save
Note that url2pdf3 requires NodeJS >= 7.6 due to heavy use of async/await.
In order to avoid experiencing missing native library issues like
/home/user/erp/node_modules/puppeteer/.local-chromium/linux-555668/chrome-linux/chrome: error while loading shared libraries: libX11-xcb.so.1: cannot open shared object file: No such file or directory
also install the native libraries that chrome needs.
sudo apt-get install gconf-service libasound2 libatk1.0-0 libc6 libcairo2 libcups2 libdbus-1-3 libexpat1 libfontconfig1 libgcc1 libgconf-2-4 libgdk-pixbuf2.0-0 libglib2.0-0 libgtk-3-0 libnspr4 libpango-1.0-0 libpangocairo-1.0-0 libstdc++6 libx11-6 libx11-xcb1 libxcb1 libxcomposite1 libxcursor1 libxdamage1 libxext6 libxfixes3 libxi6 libxrandr2 libxrender1 libxss1 libxtst6 ca-certificates fonts-liberation libappindicator1 libnss3 lsb-release xdg-utils wget ghostscript
Credits to @Coldner@ on the puppetteer issue tracker packages.
node example-pdf.js
node example-screenshot.js
const fs = require("mz/fs");
const url2pdf3 = require("url2pdf3");
url2pdf3.renderURL("https://www.google.com")
.then(pdf => {
fs.writeFile("mypdf.pdf", pdf).then(() =>
console.log("See mypdf.pdf!")
)
});
const fs = require("mz/fs");
const url2pdf3 = require("url2pdf3");
url2pdf3.renderURL("https://www.google.com", {screenshot: true})
.then(pdf => {
fs.writeFile("myscreenshot.png", pdf).then(() =>
console.log("See myscreenshot.png!")
)
});
const fs = require("mz/fs");
const url2pdf3 = require("url2pdf3");
url2pdf3.renderURLs(["https://www.google.com", "https://wikipedia.org"])
.then(pdf => {
fs.writeFile("mypdf.pdf", pdf).then(() =>
console.log("See mypdf.pdf!")
)
});
Note that loading external resources from the HTML is possible.
const url2pdf3 = require("url2pdf3");
const fs = require("fs");
url2pdf3.renderHTML("<html><body><h1>HELLO WORLD</h1></body></html>")
.then(function(pdf){
fs.writeFile('output.pdf',pdf, function(err){
if(err) {console.error(err)}
else {console.log('saved pdf to output.pdf')}
});
});
{
// defaults
format: 'A4',
scale: 1.5,
waitUntil: 'networkidle2', //
margin: { // can be also just margin: '1cm'
top: '1cm',
left: '1cm',
right: '1cm',
bottom: '1cm'
},
pageOpts: { timeout: 60000 }, // Increases the timeout for loading page to 60 seconds
// for debugging
puppeteer:{
headless: false,
devtools: true
}
}
url2pdf-plus also supported joining PDFs but this functionality has now been
rewritten and is now available in the pdf-toolz package.
Note that rendering multiple URLs and automatically concatenating the PDFs is supported.
FAQs
Renders HTML to PDF files using Puppetteer. Successor of url2pdf-plus
The npm package url2pdf3 receives a total of 23 weekly downloads. As such, url2pdf3 popularity was classified as not popular.
We found that url2pdf3 demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.