PeculiarVentures / pdf / 41424406368

77%

push

github

build(deps)!: move to x509 3, pkijs 4, asn1js 4, asn1-schema 3 and bytestreamjs 3 (#149)

pdf-core and pdf-doc take and return @peculiar/x509 certificates and
pkijs objects (signers, CRLs, OCSP responses, PDFCryptoEngine extends
pkijs.CryptoEngine), check them with `instanceof`, and read the pkijs
engine and the x509 crypto provider the application sets. Those must be
the application's copies, so they become peer dependencies:

- pdf-core: @peculiar/x509 ^3.1.0, pkijs ^4.0.0
- pdf-doc: @peculiar/asn1-schema ^3.0.0, @peculiar/x509 ^3.1.0,
  asn1js ^4.0.0, pkijs ^4.0.0
- pdf-font: @peculiar/asn1-schema ^3.0.0

The @peculiar/asn1-* schema packages move to ^3.0.0 and stay regular
dependencies (they peer on asn1-schema themselves). pdf-font moves to
bytestreamjs ^3.0.0 (no exact pin) and passes its streams to fontjs 3,
which is still typed against bytestreamjs 2, through one cast. pdf-core
no longer lists asn1js and pdf-doc no longer lists bytestreamjs; neither
imports them. pdf-cli is an application and keeps everything in
`dependencies`, adds @peculiar/webcrypto ^2.0.0 and loads
reflect-metadata itself. The pkijs override is removed.

asn1js 4 stops decoding at 10,000 nodes by default, which rejects
signature containers and CRLs that carry revocation data (a 178 KB CMS
from the test vectors needs about 15,000). pdf-doc now scales the limit
with the input size where such data is decoded.

BREAKING CHANGE: @peculiar/x509 ^3.1.0, pkijs ^4.0.0, asn1js ^4.0.0 and
@peculiar/asn1-schema ^3.0.0 are peer dependencies of pdf-core,
pdf-doc and pdf-font (npm 7+ installs them). Certificates and pkijs
objects passed to pdf must come from these versions. @peculiar/x509 3
no longer loads a Reflect polyfill: import `reflect-metadata` (or
another Reflect polyfill) once, before any other import.

2718 of 4029 branches covered (67.46%)

Branch coverage included in aggregate %.

12 of 13 new or added lines in 6 files covered. (92.31%)

7188 of 8905 relevant lines covered (80.72%)

1297.21 hits per line