packages-2026-08-10
nexu-io/open-designpackages-2026-08-10Aug 10, 2026by abimaelmartell
AI Summary
This consolidated package release updates Rust, Python, Node.js, and WebAssembly versions, focusing on hardening parsing against malformed inputs and enhancing extraction correctness for complex PDF structures.
Key Highlights
- Hardens parsing against nested-object, malformed Unicode, and extreme-coordinate denial-of-service cases
- Improves extraction correctness for contextual digit runs, redline/strikeout handling, and password-protected items
- Improves ruled-table preservation, chart reading order, and rejects script attachments
- Adds non-blocking async variants to the Node API
- Refreshes packaged API and benchmark documentation
New Features
- Hardening against nested-object and malformed Unicode attacks
- Improved extraction for contextual digits, redlines, and Base-14 fonts
- Improved ruled-table preservation and chart reading order
- Non-blocking async variants in Node API
- Updated API and benchmark documentation
Full Release Notes
## Packages All packages were built from source checkpoint [`965dc65`](https://github.com/firecrawl/pdf-inspector/commit/965dc65f1b3dbef192021e71fb0277074970f11f). - [Rust crate `pdf-inspector` 0.1.8](https://crates.io/crates/pdf-inspector/0.1.8) — `cargo add pdf-inspector@0.1.8` - [Python `pdf-inspector` 0.2.7](https://pypi.org/project/pdf-inspector/0.2.7/) — `pip install pdf-inspector==0.2.7` - [Node `@firecrawl/pdf-inspector` 1.13.0](https://www.npmjs.com/package/@firecrawl/pdf-inspector/v/1.13.0) — `npm install @firecrawl/pdf-inspector@1.13.0` - [WebAssembly `@firecrawl/pdf-inspector-wasm` 0.1.4](https://www.npmjs.com/package/@firecrawl/pdf-inspector-wasm/v/0.1.4) — `npm install @firecrawl/pdf-inspector-wasm@0.1.4` <details> <summary>Node platform packages</summary> - [Linux x64 glibc](https://www.npmjs.com/package/@firecrawl/pdf-inspector-linux-x64-gnu/v/1.13.0) - [Linux x64 musl](https://www.npmjs.com/package/@firecrawl/pdf-inspector-linux-x64-musl/v/1.13.0) - [Linux ARM64 glibc](https://www.npmjs.com/package/@firecrawl/pdf-inspector-linux-arm64-gnu/v/1.13.0) - [Linux ARM64 musl](https://www.npmjs.com/package/@firecrawl/pdf-inspector-linux-arm64-musl/v/1.13.0) - [macOS ARM64](https://www.npmjs.com/package/@firecrawl/pdf-inspector-darwin-arm64/v/1.13.0) - [Windows x64 MSVC](https://www.npmjs.com/package/@firecrawl/pdf-inspector-win32-x64-msvc/v/1.13.0) </details> ## Highlights - Hardens parsing against nested-object, AcroForm `/Kids`, structure-tree, malformed Unicode/glyph-name, and extreme-coordinate denial-of-service or panic cases (#198, #314, #320, #321, #322, #328). - Improves extraction correctness for contextual digit runs, redline/strikeout handling, escaped comments, Base-14 fonts, CFF CID fonts, page-prefixed Markdown, corrupt `startxref` pointers, OCR-routing parity, and password-protected item JSON (#201, #209, #230, #231, #240, #241, #245, #253, #259, #284). - Improves ruled-table preservation, chart reading order, and rejection of script attachments or tiny numeric table fragments (#262, #264). - Adds non-blocking async variants to the Node API (#337) and synchronizes Python type stubs with the shipped bindings (#250). - Refreshes packaged API and benchmark documentation (#192). ## Changes since each package's previous release The package versions were not previously consolidated, so each changelog starts at that package's actual published commit rather than an old repository-wide `v*` tag. | Package | Version | Source changes | | --- | --- | --- | | Rust crate | `0.1.7 → 0.1.8` | [`5e8f157..965dc65`](https://github.com/firecrawl/pdf-inspector/compare/5e8f157...965dc65) | | Python | `0.2.6 → 0.2.7` | [`7b7960e..965dc65`](https://github.com/firecrawl/pdf-inspector/compare/7b7960e...965dc65) | | Node | `1.12.0 → 1.13.0` | [`98990cc..965dc65`](https://github.com/firecrawl/pdf-inspector/compare/98990cc...965dc65) | | WebAssembly | `0.1.3 → 0.1.4` | [`7188667..965dc65`](https://github.com/firecrawl/pdf-inspector/compare/7188667...965dc65) | This is the first package-umbrella GitHub release. Earlier `v*` tags tracked individual package history and should not be treated as a unified release line.