packages-2026-08-10

SagerNet/sing-boxpackages-2026-08-10Aug 10, 2026by abimaelmartell

AI Summary

This consolidated package release updates Rust, Python, Node, and WASM packages, emphasizing security hardening against malformed inputs and significant improvements to extraction correctness and table handling.

Key Highlights

  • Hardens parsing against nested objects, malformed Unicode, and extreme coordinates to prevent denial-of-service or panic
  • Improves extraction correctness for digit runs, redline/strikeout, Base-14 fonts, and password-protected items
  • Improves ruled-table preservation, chart reading order, and rejection of script attachments
  • Adds non-blocking async variants to the Node API

New Features

  • DoS/Panic prevention for malformed inputs
  • Async Node API support
  • Improved extraction for Base-14 and CFF CID fonts
  • Enhanced table and chart reading order

Full Release Notes

## Packages

All packages were built from source checkpoint [`965dc65`](https://github.com/firecrawl/pdf-inspector/commit/965dc65f1b3dbef192021e71fb0277074970f11f).

- [Rust crate `pdf-inspector` 0.1.8](https://crates.io/crates/pdf-inspector/0.1.8) — `cargo add pdf-inspector@0.1.8`
- [Python `pdf-inspector` 0.2.7](https://pypi.org/project/pdf-inspector/0.2.7/) — `pip install pdf-inspector==0.2.7`
- [Node `@firecrawl/pdf-inspector` 1.13.0](https://www.npmjs.com/package/@firecrawl/pdf-inspector/v/1.13.0) — `npm install @firecrawl/pdf-inspector@1.13.0`
- [WebAssembly `@firecrawl/pdf-inspector-wasm` 0.1.4](https://www.npmjs.com/package/@firecrawl/pdf-inspector-wasm/v/0.1.4) — `npm install @firecrawl/pdf-inspector-wasm@0.1.4`

<details>
<summary>Node platform packages</summary>

- [Linux x64 glibc](https://www.npmjs.com/package/@firecrawl/pdf-inspector-linux-x64-gnu/v/1.13.0)
- [Linux x64 musl](https://www.npmjs.com/package/@firecrawl/pdf-inspector-linux-x64-musl/v/1.13.0)
- [Linux ARM64 glibc](https://www.npmjs.com/package/@firecrawl/pdf-inspector-linux-arm64-gnu/v/1.13.0)
- [Linux ARM64 musl](https://www.npmjs.com/package/@firecrawl/pdf-inspector-linux-arm64-musl/v/1.13.0)
- [macOS ARM64](https://www.npmjs.com/package/@firecrawl/pdf-inspector-darwin-arm64/v/1.13.0)
- [Windows x64 MSVC](https://www.npmjs.com/package/@firecrawl/pdf-inspector-win32-x64-msvc/v/1.13.0)

</details>

## Highlights

- Hardens parsing against nested-object, AcroForm `/Kids`, structure-tree, malformed Unicode/glyph-name, and extreme-coordinate denial-of-service or panic cases (#198, #314, #320, #321, #322, #328).
- Improves extraction correctness for contextual digit runs, redline/strikeout handling, escaped comments, Base-14 fonts, CFF CID fonts, page-prefixed Markdown, corrupt `startxref` pointers, OCR-routing parity, and password-protected item JSON (#201, #209, #230, #231, #240, #241, #245, #253, #259, #284).
- Improves ruled-table preservation, chart reading order, and rejection of script attachments or tiny numeric table fragments (#262, #264).
- Adds non-blocking async variants to the Node API (#337) and synchronizes Python type stubs with the shipped bindings (#250).
- Refreshes packaged API and benchmark documentation (#192).

## Changes since each package's previous release

The package versions were not previously consolidated, so each changelog starts at that package's actual published commit rather than an old repository-wide `v*` tag.

| Package | Version | Source changes |
| --- | --- | --- |
| Rust crate | `0.1.7 → 0.1.8` | [`5e8f157..965dc65`](https://github.com/firecrawl/pdf-inspector/compare/5e8f157...965dc65) |
| Python | `0.2.6 → 0.2.7` | [`7b7960e..965dc65`](https://github.com/firecrawl/pdf-inspector/compare/7b7960e...965dc65) |
| Node | `1.12.0 → 1.13.0` | [`98990cc..965dc65`](https://github.com/firecrawl/pdf-inspector/compare/98990cc...965dc65) |
| WebAssembly | `0.1.3 → 0.1.4` | [`7188667..965dc65`](https://github.com/firecrawl/pdf-inspector/compare/7188667...965dc65) |

This is the first package-umbrella GitHub release. Earlier `v*` tags tracked individual package history and should not be treated as a unified release line.