Looks like percy/cli recently introduced the pdfjs-dist library as part of #2418. Seems like the original plan was to pin it on v4 but that changed to v2 at some point? Older versions of pdfjs-dist though get flagged with GHSA-wgrm-67xf-hhpq (fixed in 4.2.67) so upgrading to percy/cli 1.32.10 now brings this audit finding into a repo.
Looks like percy/cli recently introduced the pdfjs-dist library as part of #2418. Seems like the original plan was to pin it on v4 but that changed to v2 at some point? Older versions of pdfjs-dist though get flagged with GHSA-wgrm-67xf-hhpq (fixed in 4.2.67) so upgrading to percy/cli 1.32.10 now brings this audit finding into a repo.