Hi,

Thanks for working on this package!

I can take a look over the weekend if no one beats me to it.

Cheers,
Kanru

On Thu, Jan 30, 2020, at 6:30 AM, Bastian Germann wrote:
> Package: wnpp
> Severity: wishlist
> 
> * Package name    : mujs
>   Version         : 1.0.6
>   Upstream Author : Tor Andersson <tor.anders...@artifex.com>
> * URL             : https://mujs.com/
> * License         : ISC
>   Programming Lang: C
>   Description     : A Lightweight, embeddable JavaScript interpreter
> 
> MuJS should be added to the archive because the mupdf package includes
> this as a vendored dependency: #949636.
> 
> There are some MuJS-related CVEs that are all tagged "NOT-FOR-US: MuJS"
> even though they might be applicable for the mupdf package.
> 
> MuJS was designed with a focus on small size, correctness, and
> simplicity. It is written in portable C and implements ECMAScript as
> specified by ECMA-262. The interface for binding with native code is
> designed to be as simple as possible to use, and is very similar to Lua.
> There is no need to interact with byzantine C++ template mechanisms, or
> worry about marking and unmarking garbage collection roots, or wrestle
> with obscure build systems.
>

Reply via email to