ExcelsisView 1.1.23

ExcelsisView 1.1.23 opens the active DXF/DWG model or paper space instead of drawing both together. Large read-only DWGs now use cached drawing paths, indexed hit-testing, bounded feature-list output, and defer editable contour analysis until Save As DXF. The responsive two-row DXF toolbar behavior from 1.1.22 is retained.

The complete clean build, dependency, containment, format, privacy, provenance, licensing, corresponding-source, packaged-byte, and antivirus gates passed. See AUDIT-1.1.23.md in the repository for detailed evidence and caveats.

The Windows installer is unsigned and may trigger SmartScreen. Microsoft Defender was disabled on the build machine; Kaspersky 21.26.4.406 with 2026-08-11 bases scanned the exact candidate assets and extracted runtime with zero detections or suspicions.

Installer SHA-256: 1B40EB47E5C47E7C7E4E9F66144525D4B2FF1C37957D54D64D7C0407C68DA0DE

The adjacent application, nanoPRC, U3D, and LibreDWG source assets are the corresponding source for redistribution.

ExcelsisView 1.1.22

ExcelsisView 1.1.22 keeps DXF toolbar labels on one line and automatically changes the toolbar to exactly two rows at narrow window widths, without horizontal scrolling. The regular-PDF and 3D-PDF toolbar behavior is unchanged.

The full build, dependency, containment, format, privacy, provenance, licensing, corresponding-source, packaged-byte, and antivirus gates passed. See AUDIT-1.1.22.md in the repository for the evidence and caveats.

The Windows installer is unsigned and may trigger SmartScreen. Microsoft Defender was disabled on the build machine; Kaspersky 21.26.4.406 scanned 21,043 exact/expanded objects with zero detections or suspicions.

Installer SHA-256: BA39596982B58FFA04F41FDB47847ECEFDA5946A76F086C084F44DD1323C99B7

The adjacent application, nanoPRC, U3D, and LibreDWG source assets are the corresponding source for redistribution.

ExcelsisView 1.1.21

ExcelsisView 1.1.21 fixes the DXF/DWG editing toolbar at narrow window widths: button labels remain contained on one line and the toolbar scrolls horizontally when necessary. Regular PDF and 3D PDF toolbars were visually checked and remain clean.

Release verification:

• protected-branch CodeQL passed for C/C++, JavaScript/TypeScript, and Python
• full clean dependency, licensing, provenance, privacy, source, package, and payload audits passed
• Kaspersky 21.26.4.406 scan: 20,597 objects checked, 0 detections or suspicious objects
• exact corresponding source and pinned nanoPRC, U3D, and LibreDWG source archives are attached
• licensed under AGPL-3.0-or-later; see LICENSE.txt, SOURCE.md, and THIRD_PARTY_NOTICES.md

Windows installer SHA-256:
D5F91BF4D8437EC024AED6C27E7A11B3EB8DF8CC293CF519975428E00441A4F8

The Windows installer and executable are currently unsigned. Windows SmartScreen may warn on first launch; verify the SHA-256 before running.

ExcelsisView 1.1.20

ExcelsisView 1.1.20

ExcelsisView 1.1.20 is the independently rebuilt public release for DXF, DWG,
regular PDF, and supported PRC/U3D 3D PDF documents.

• Rebuilds the shipped Three.js 0.160.0 runtime deterministically from pinned
  corresponding source and replaces its object-identifier randomness with
  Web Crypto.
• Hardens nanoPRC count, allocation, PNG conversion, and zlib paths and limits
  its stb_image build to the JPEG and PNG formats used by PRC pictures.
• Adds native regression coverage for those image-decoder boundaries and
  retains the existing hostile PRC/U3D, document, containment, Explorer,
  licensing, privacy, and exact packaged-byte gates.
• Removes private build paths from native compiler metadata and adds a release
  audit that prevents their return.
• Documents every CodeQL finding from the previous baseline: shipped findings
  were fixed, while preserved but uncompiled upstream targets and the legacy
  PDF document-decryption compatibility path have narrow, evidence-backed
  dispositions.
• Keeps exact modified nanoPRC and U3D source, exact LibreDWG source, pinned web
  runtime tarballs, licenses, notices, build scripts, and application source
  beside the installer.

The installer and application binaries are unsigned. Windows may show an
unknown-publisher or SmartScreen warning. Verify the published SHA-256 before
running the installer.

ExcelsisView 1.1.19

ExcelsisView 1.1.19

ExcelsisView 1.1.19 is the independently rebuilt public release for DXF, DWG,
regular PDF, and supported PRC/U3D 3D PDF documents.

• Updates Electron within supported major 43 to security-patched 43.3.0
  (Chromium 150.0.7871.212 and Node.js 24.18.1).
• Keeps nanoPRC, U3D, and LibreDWG native parsing behind the bounded Windows
  process-containment boundary.
• Repairs the U3D corresponding-source build so the published Git-free source
  archive validates the pinned upstream commit through UPSTREAM-COMMIT.txt.
• Keeps exact modified nanoPRC and U3D source, exact LibreDWG source, licenses,
  notices, build scripts, and application source beside the installer.
• Preserves the security hardening and hostile-input coverage introduced in
  the preceding U3D releases.

The installer and application binaries are unsigned. Windows may show an
unknown-publisher or SmartScreen warning. Verify the published SHA-256 before
running the installer.

ExcelsisView 1.1.15

ExcelsisView 1.1.15 is a security-hardening release for the U3D path in
supported 3D PDF documents.

Changes:

• Added checked limits for U3D JPEG/PNG dimensions, pitch, component count,
  multiplication, allocation, reallocation, resize buffers, and render copies.
• Validated animation and subdivision output pointers before dereference.
• Added hostile native and bridge tests covering overflow, excessive sizes,
  allocation failure, and truncated JPEG/PNG texture data.
• Passed GitHub CodeQL for C/C++, JavaScript/TypeScript, and Python; the seven
  previously blocking U3D findings are absent from the 1.1.15 analysis.
• Preserved the existing DXF, DWG, regular PDF, PRC, U3D, OCR, export, and
  Explorer-thumbnail capabilities.

Licensing and source:

• ExcelsisView and nanoPRC are AGPL-3.0-or-later.
• LibreDWG is GPL-3.0-or-later; U3D is Apache-2.0.
• The exact complete application, nanoPRC, U3D, and LibreDWG corresponding
  source packages are attached and are also available from the installed
  resources.
• See AUDIT-1.1.15.md and SHA256SUMS.txt in the repository for the complete
  release assessment and hashes.

Windows notice: the installer and first-party binaries are unsigned and may
trigger SmartScreen. Kaspersky 21.25 with 2026-07-31 bases scanned the exact
release assets, unpacked payload, and expanded source with zero detections or
suspicions. Microsoft Defender was disabled, so no Defender scan is claimed.
Verify the published SHA-256 before running the installer.

ExcelsisView 1.1.14

ExcelsisView 1.1.14 is the first release in the standalone ExcelsisViewer
repository.

Highlights:

• DXF viewing/editing and open-source LibreDWG conversion
• regular PDF viewing, editing, OCR, save/export, and thumbnails
• supported PRC 3D PDF decoding through pinned AGPL nanoPRC
• supported ECMA-363 U3D 3D PDF decoding through the pinned Apache-2.0 U3D
  reference implementation
• read-only Windows Explorer thumbnail provider
• contained native parsing with AppContainer, Job Object, resource, cache,
  and scene-complexity limits
• full corresponding source and third-party notices

The release passed clean-source rebuild, dependency, provenance, licensing,
privacy, native-containment, functional, source-correspondence, and exact
packaged-runtime checks. See
AUDIT-1.1.14.md
and SHA256SUMS.txt.

Important: the installer and first-party binaries are unsigned, so Windows
may show SmartScreen warnings. Microsoft Defender was disabled in the build
environment, so this release was not Defender signature-scanned. Verify the
installer SHA-256 before running it.