Hi, Thanks for working on this package!
I can take a look over the weekend if no one beats me to it. Cheers, Kanru On Thu, Jan 30, 2020, at 6:30 AM, Bastian Germann wrote: > Package: wnpp > Severity: wishlist > > * Package name : mujs > Version : 1.0.6 > Upstream Author : Tor Andersson <tor.anders...@artifex.com> > * URL : https://mujs.com/ > * License : ISC > Programming Lang: C > Description : A Lightweight, embeddable JavaScript interpreter > > MuJS should be added to the archive because the mupdf package includes > this as a vendored dependency: #949636. > > There are some MuJS-related CVEs that are all tagged "NOT-FOR-US: MuJS" > even though they might be applicable for the mupdf package. > > MuJS was designed with a focus on small size, correctness, and > simplicity. It is written in portable C and implements ECMAScript as > specified by ECMA-262. The interface for binding with native code is > designed to be as simple as possible to use, and is very similar to Lua. > There is no need to interact with byzantine C++ template mechanisms, or > worry about marking and unmarking garbage collection roots, or wrestle > with obscure build systems. >