Pinned official npm packages: pdfjs-dist 6.4.299 (Apache-2.0); pdf-lib 1.17.1 (MIT).
Source: https://github.com/mozilla/pdf.js and https://github.com/Hopding/pdf-lib
PDF.js includes third-party CMaps, Foxit/Liberation fonts and pure-JavaScript wasm2js image decoders; licenses included.
No WebAssembly binary, remote CDN, tracking or paid SDK. All executable code served from this origin.