Package Health

pdfmake

Client/server side PDF printing in pure JavaScript

Latest 0.3.11NPMNPM

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

33

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

100

Are you affected? Scan for Free

Health Score Breakdown

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. Although 16 releases occurred in the last year, the absence of recent source activity raises abandonment and maintenance-continuity concerns.

Project backingcaution

The repository is owned by an individual account rather than an organization. This does not establish poor backing, but it provides less visible organizational continuity than an organization-owned project.

Repo issue activitycaution

The repository has 210 open issues and 27 open pull requests, while the last month saw one new issue, no closed issues, three new pull requests, and no merges. The backlog and lack of recent resolution suggest maintenance pressure.

Repo toolingcaution

The project uses webpack, Babel, and npm scripts, but no security-scanning tools were detected. Build tooling is present; the missing scanning coverage is a moderate hygiene gap.

Security policycaution

No security policy was found in the repository. This weakens vulnerability-reporting transparency, though it does not by itself show that the package is unsafe.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-10975 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
pdfmake is vulnerable to Path Traversal in versions 0.3.0 - 0.3.7.
0.3.0 - 0.3.7
Medium
AIKIDO-2026-10337
pdfmake is vulnerable to Server-side Request Forgery (SSRF) in versions 0.0.1 - 0.3.5.
0.0.1 - 0.3.5
Medium
CVE-2025-11362
pdfmake is vulnerable to Allocation of Resources Without Limits or Throttling in versions 0.3.0-beta.1 - 0.3.0-beta.17.
0.3.0-beta.1 - 0.3.0-beta.17
High

Package versions

Direct Dependencies

DependencyLast ReleaseScore
pdfkit
Version ^0.19.1
—
—
xmldoc
Version ^2.0.3
—
—
linebreak
Version ^1.1.0
—
—

Weekly Downloads

Info

Last Published
4 months ago
Created
12 years ago
Unpacked Size
14.7 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform