Client/server side PDF printing in pure JavaScript
68%
Total Score
33
100
88
67
100
There were zero commits and zero active maintainers in the last three months. Although 16 releases occurred in the last year, the absence of recent source activity raises abandonment and maintenance-continuity concerns.
The repository is owned by an individual account rather than an organization. This does not establish poor backing, but it provides less visible organizational continuity than an organization-owned project.
The repository has 210 open issues and 27 open pull requests, while the last month saw one new issue, no closed issues, three new pull requests, and no merges. The backlog and lack of recent resolution suggest maintenance pressure.
The project uses webpack, Babel, and npm scripts, but no security-scanning tools were detected. Build tooling is present; the missing scanning coverage is a moderate hygiene gap.
No security policy was found in the repository. This weakens vulnerability-reporting transparency, though it does not by itself show that the package is unsafe.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-10975 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. pdfmake is vulnerable to Path Traversal in versions 0.3.0 - 0.3.7. | 0.3.0 - 0.3.7 | Medium |
AIKIDO-2026-10337 pdfmake is vulnerable to Server-side Request Forgery (SSRF) in versions 0.0.1 - 0.3.5. | 0.0.1 - 0.3.5 | Medium |
CVE-2025-11362 pdfmake is vulnerable to Allocation of Resources Without Limits or Throttling in versions 0.3.0-beta.1 - 0.3.0-beta.17. | 0.3.0-beta.1 - 0.3.0-beta.17 | High |
| Dependency | Last Release | Score |
|---|---|---|
pdfkit Version ^0.19.1 | — | — |
xmldoc Version ^2.0.3 | — | — |
linebreak Version ^1.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.