Trouble integrating PDF.js v4.2.67 into AMD (Dojo) environment like Alfresco Share

[debjit-chattopadhyay-hyland]

📘 Background

I'm upgrading PDF.js in an enterprise legacy system (Alfresco Share) which uses AMD via Dojo.

PDF.js v2.5.207 worked fine, but I want to use the latest stable (v4.2.67) to fix security vulnerability

https://codeanlabs.com/blog/research/cve-2024-4367-arbitrary-js-execution-in-pdf-js/

---

⚠️ Issue

The modern PDF.js builds (including legacy builds) seem to only ship .mjs files using ES modules.

However, Alfresco Share requires scripts in UMD or AMD format, so they can be loaded using define() in Dojo.

When I try to use the .mjs files directly or transpile them manually, I encounter:

• SyntaxError: Unexpected token 'export'
• Error: multipleDefine
• pdfjsLib is not defined

---

✅ What I Tried

• Downloaded pdfjs-4.2.67-dist.zip and tried files under legacy/ and build/.
• Ran a Babel transpile with @babel/plugin-transform-modules-umd.
• Replaced pdf.js and pdf.worker.js in Share with UMD-wrapped versions.
• Ensured pdfjsLib.GlobalWorkerOptions.workerSrc is set properly.

---

🤔 What I Need Help With

1. Does PDF.js still publish UMD builds?

   • If yes: where can I find the right files?
   • If not: is there a recommended way to transpile .mjs to UMD manually?

2. Is there a pdf.worker.js UMD-compatible version available?

3. Are there plans to provide better backward compatibility for AMD/UMD environments?

---

Thanks in advance! 🙏