textract

v2.5.0npm· JavaScript

Extracting text from files of various type including html, pdf, doc, docx, xls, xlsx, csv, pptx, png, jpg, gif, rtf, text/*, and various open office.

The verdict

Has 1 high-severity advisory. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the npm registry · derived rules, not AI

How it scores

MaintenanceAbandoned

PopularityUnknown

Security1 advisory

LicensePermissive

DepsModerate

Maintenance

Last published 6 years ago.

Popularity

Download count unavailable.

Security

1 known advisory (worst: high severity).

License

MIT

Dependencies

14 direct dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
textract is vulnerable to OS Command Injection
GHSA-9pcj-m5rr-p28g Published 2026-03-25

Recent releases