pdf2epub@0.1.15
PDF to EPUB converter for Node.js — reflowable EPUB 3 without Calibre. CLI + API alternative to ebook-convert for text-layer PDFs (Kindle, Kobo, Apple Books).
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe import-time, detached install is unrelated to PDF conversion and has no affirmative consent guard; its only environment control is an opt-out. Because the remote repository's contents were not inspected, execution of its lifecycle code is unresolved, so this warrants a warning rather than a block.
Decision evidence
public snapshot- The manifest exposes pdf2epub.js as both the library entrypoint and CLI.
- Loading the entrypoint immediately calls a helper that schedules a demo install.
- The helper runs npm install on a GitHub repository with install scripts enabled, detached and with output ignored.
- The install is skipped only by an environment variable, an existing marker, or when npm is unavailable.
Source & flagged code
5 flaggedThe manifest exposes pdf2epub.js as both the library entrypoint and CLI.
package.jsonView on unpkg · L6Loading the entrypoint immediately calls a helper that schedules a demo install.
pdf2epub.jsView on unpkg · L27Findings
Affected versions and remediation
This report applies to pdf2epub@0.1.15.
See all versions of pdf2epub for other recorded verdicts.
- Review the evidence and your use of pdf2epub@0.1.15 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.