Is node-qpdf safe to use?

node-qpdf has 1 known vulnerabilities on the latest version (1.0.3). DepScope rates its health at 43/100 (high risk).

What is the latest version of node-qpdf?

The latest version of node-qpdf is 1.0.3, released 2018-01-23.

Does node-qpdf have known vulnerabilities?

Yes. node-qpdf has 1 known vulnerabilities. See depscope.dev/pkg/npm/node-qpdf for details.

Is node-qpdf deprecated?

No, node-qpdf is actively maintained. Latest release: 1.0.3 (2018-01-23).

What are alternatives to node-qpdf?

Popular alternatives to node-qpdf in npm include: ?, semver, ansi-styles, debug, minimatch.

What license does node-qpdf use?

node-qpdf is licensed under MIT.

node-qpdf

npmv1.0.3

A Content Preserving transformations on PDFs wrapped around QPDF

License MITpermissive4 versions1 maintainers0 deps9,308 weekly dl

nrhirani/node-qpdf

/ 100

Health

update required

[email protected] has vulnerabilities — update to latest

Moderate health score (43/100) — verify manually
1 high severity vulnerabilities

Health breakdown0 – 100

0/25

maintenance

6/20

popularity

20/25

security

15/15

maturity

2/15

community

Vulnerabilities

1 high

Advisories (1)

Severity	ID	Summary	Fixed in
high	CVE-2023-26155	node-qpdf vulnerable to command injection	—

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/node-qpdf