ngx-extended-pdf-viewer
Embedding PDF files in your Angular application. Highly configurable viewer including the toolbar, sidebar, and all the features you're used to.
88%
Total Score
healthy
Frequent releases and active source maintenance outweigh workflow pinning and package-installation hygiene gaps.
Health Score Breakdown
Both workflows were analyzed without failures and have no untrusted checkouts or script injection, but all 7 action references are unpinned, publish.yml has top-level write permissions, and it installs a package outside a lockfile. The high-severity cache-poisoning finding has low confidence, so it is a hygiene concern rather than a severe risk by itself.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2024-10104 ngx-extended-pdf-viewer is vulnerable to Eval Injection in versions 0.0.1 - 20.0.2. | 0.0.1 - 20.0.2 | High |
AIKIDO-2024-10025 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. ngx-extended-pdf-viewer is vulnerable to Cross-site Scripting (XSS) in versions 0.0.1 - 19.4.1. | 0.0.1 - 19.4.1 | Low |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tslib Version ^2.3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 8 years ago
- Unpacked Size
- 51.5 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.