{
  "schemaVersion": 1,
  "package": "pdfjs-dist",
  "version": "4.2.67",
  "upstreamArchive": "https://registry.npmjs.org/pdfjs-dist/-/pdfjs-dist-4.2.67.tgz",
  "upstreamArchiveSha256": "c26bcf57ef942ba267cd7b3897a610d375428ed2e8cc223d659e6e5478b8c80c",
  "registryIntegrity": "sha512-rJmuBDFpD7cqC8WIkQUEClyB4UAH05K4AsyewToMTp2gSy3Rrx8c1ydAVqlJlGv3yZSOrhEERQU/4ScQQFlLHA==",
  "artifacts": [
    {
      "file": "pdf.min.mjs",
      "source": "build/pdf.min.mjs",
      "sourceSha256": "c3caae2cf1fe9d6e25588d0d239d02454422778ed5897314981496a4656eab82",
      "sha256": "c360de3cc739ed4891ffa70c0336dbface6bbbc6f2c43c25947ed71a338c2b61",
      "bytes": 337212,
      "patch": {
        "kind": "local Promise.withResolvers equivalent",
        "replacements": 31
      }
    },
    {
      "file": "pdf.worker.min.mjs",
      "source": "build/pdf.worker.min.mjs",
      "sourceSha256": "ee61de6dd3effd826b7083739409e50bae43c2e41a896f27ea8dd2d77e2f349b",
      "sha256": "18073b3f0dde3a78ff523f8a5bbc41f1f5f305accd139d9ecd199e01a6565439",
      "bytes": 1340100,
      "patch": {
        "kind": "local Promise.withResolvers equivalent",
        "replacements": 11
      }
    },
    {
      "file": "LICENSE",
      "source": "LICENSE",
      "sourceSha256": "0d542e0c8804e39aa7f37eb00da5a762149dc682d7829451287e11b938e94594",
      "sha256": "0d542e0c8804e39aa7f37eb00da5a762149dc682d7829451287e11b938e94594",
      "bytes": 10174
    }
  ],
  "security": {
    "advisory": "GHSA-wgrm-67xf-hhpq",
    "fixedRelease": "4.2.67",
    "callerDefense": "isEvalSupported:false and enableXfa:false remain enforced by the shared caller."
  },
  "scope": "Modern upstream ES modules. Only a local equivalent of Promise.withResolvers is inserted, preserving older browser support without changing global built-ins. Main and worker keep the same upstream version. No sandbox or viewer is distributed."
}