PlutarchPages v0.18.2

What's Changed

• Rename the Flatpak ID to io.github.yungSNAT.PlutarchPages by @yungSNAT in #90
• Ignore RUSTSEC-2026-0486 in the unused vendor lockfiles by @yungSNAT in #91
• docs: point the Codacy link at yungSNAT after the organisation rename by @yungSNAT in #92
• fix(ocr): keep Clippy 1.100's needless_bool off the Windows gate by @yungSNAT in #93
• docs: say when Stirling-PDF still fits better and where Windows keeps pdfcraft-cli by @yungSNAT in #94
• xtask: report first-parent drift beside the all-commit count by @yungSNAT in #95
• docs(external): say a running conversion has no Stop, only its deadline and app exit by @yungSNAT in #96
• Report malformed metadata as a finding and keep auditing the pages by @yungSNAT in #97
• fix(xfdf): keep signed amounts such as -1,234.56 and -$50.00 as numbers in CSV exports by @yungSNAT in #98
• Pin the audit's exit status for malformed metadata by @yungSNAT in #99
• docs(readme): give the MSI's default per-user path for pdfcraft-cli.exe by @yungSNAT in #100
• fix(xfdf): keep CSV cells from running as formulae where a spreadsheet splits on ; or tabs by @yungSNAT in #101
• docs(xfdf): CSV import keeps the added apostrophe; say where formula protection was tested by @yungSNAT in #102
• fix(redact): search every layer when marking text for redaction by @yungSNAT in #104
• fix(audit): read the text form XObjects draw and check it under covers by @yungSNAT in #105
• chore(release): prepare 0.18.2 with a Flatpak upgrade note by @yungSNAT in #103

Full Changelog: v0.18.1...v0.18.2

PlutarchPages v0.18.1

PlutarchPages is a PDF reader and editor written in Rust, and a fork of PdfCraft. This release fixes 2 security problems in v0.16.1, so update if you use v0.16.1 or earlier. It also brings in upstream PdfCraft v0.18.1 and upstream's later work to 8 November (commit 5bb8bbf2); it is not upstream's v0.19.0 release.

Security fixes

• Encrypted files could be saved with a stream in the clear. A stream whose crypt filter name the file doesn't define was read as unencrypted, so saving the file wrote that stream without encryption. It now takes the document's filter, and a file whose default filters name an undefined crypt filter is refused (#66).
• A hostile PDF could exhaust memory through a JBIG2 image, making the decoder allocate 137 GB or run for minutes. Segments, references, Huffman tables, retained memory and total decoding work are now bounded, and a page's JBIG2 images share one allowance (#67 and the upstream merge #69).
• From upstream: XFA form scripts come only from the form's own packets (#52), signature preview images decode within a small work allowance, and redaction no longer leaves form XObject /PCAdded entries or structure titles of removed content.
• Takes rustix 1.1.6 for RUSTSEC-2026-0486 (#89).

New in the fork

• Hidden text in the text tools. text_extract, text_find and markup find flag hidden, clipped and hidden-layer text with every reason, warn when the extracted text differs from what the page shows, and read with the view's layers (#60, #74, #87, #88).
• Redaction audits flag retained glyph advances and metadata that can reveal removed text (#76).
• Editing text keeps a variation selector with its character (#51).
• Undo keeps packed objects, and right-to-left two-page views read from the right (#63).
• Translators can list the PlutarchPages strings their language is missing (#72).
• The OCR models in the packages come from verified sources (#75).

New from upstream

• Interface: a customisable quick-tools strip, freehand highlight, a movable navigation rail and a redesigned Preferences dialog.
• Preferences: how many recent files to keep, page-edge shadows, inverting the middle-button drag and keeping scroll animations off.
• Create and export: Create ▸ Blank page uses your region's paper size, HTML export without CSS, and Bates numbering continued across ordered PDFs.
• Scans: redaction clears the covered pixels of black-and-white JBIG2 scans and stores them again as Group 4 or JBIG2; the PDF Optimizer reads and averages JBIG2 scans.
• Command line: --two-paged opens a file in two-page view.
• Interface translations now come from craft-i18n, with French and Turkish filled in.
• Many rendering, forms, redaction and editing fixes. Upstream's v0.17.0, v0.18.0 and v0.18.1 notes list them.

Fork changes has the full list of what the fork adds, including what isn't implemented and why.

Downloads

System	Download
Windows	pdfcraft-0.18.1-windows-x64.msi, also x86 and arm64, or a -portable.zip
macOS	pdfcraft-0.18.1-macos-universal.dmg
Linux	.AppImage, .deb, .rpm, .tar.gz, .flatpak or Arch .pkg.tar.zst, for x86_64 and aarch64
Linux riscv64	.deb, .rpm or .tar.gz (glibc 2.39 or newer)
FreeBSD	pdfcraft-0.18.1-freebsd-x86_64.tar.gz or -aarch64.tar.gz
Web	pdfcraft-web-0.18.1.zip, a static site to host yourself
Command line only	pdfcraft-cli-0.18.1-*, for Linux and macOS

Download files, the pdfcraft and pdfcraft-cli programs, and the .deb and .rpm package names keep the upstream pdfcraft name, so upstream changes still merge. The app shows its name as PlutarchPages, and on Windows it installs to a PlutarchPages folder. The Flatpak keeps the ID io.github.EquityBot.PlutarchPages in this release; a later release moves it to io.github.yungSNAT.PlutarchPages and will say how to keep your settings.

Before you install

• The packages are unsigned, so Windows and macOS may warn about or block them. To check a download against SHA256SUMS.txt:

  sha256sum --check --ignore-missing SHA256SUMS.txt

• Don't install it alongside upstream PdfCraft on Windows. The 2 share some registry entries, because both use pdfcraft.exe, so this isn't supported.

• Upgrading from v0.16.1 is tested only for the Windows x64 installer. Other packages haven't been tested over an earlier build.

Report problems in Issues, and security problems privately as SECURITY.md describes.

Licence: MIT or Apache-2.0. All changes: v0.16.1 to v0.18.1.

PlutarchPages v0.16.1

PlutarchPages is a PDF reader and editor written in Rust, and a fork of PdfCraft. This release brings in upstream PdfCraft v0.16.1 and adds Flatpak, Arch, FreeBSD, riscv64 and web packages, for 30 in all.

New in the fork

• Printing Type 3 fonts on Windows. Pages that use them now go to the printer as pictures at the Print as image resolution; other pages stay vector. This stops the crash in upstream issue 2684 on that issue's sample file, tested by printing to memory, not on a physical printer.
• Find matches script variants that look the same: Kangxi radicals find their ideographs, Arabic presentation forms find their base letters, Persian yeh and kaf find the Arabic letters, Arabic-Indic digits find ASCII digits, and Arabic marks other than hamza and madda are ignored. Redaction uses the same matching, so it can find more, never less.
• Stronger keys for password protection. New protection takes its keys and salts from the operating system's random number generator. v0.15.0 derived them from Rust's hash-map seeding, which isn't designed for cryptography; protect a file again with this version to give it new keys.
• A faster Comments panel in documents with hundreds of comments.

New from upstream

• Export to Markdown.
• Black-and-white images stay 1-bit. The PDF Optimizer can store them as CCITT Group 4 or lossless JBIG2 and average them down from above 450 ppi to 300; Create PDF keeps them at 1 bit.
• Forms: edit check box and radio button export values; the Calculation order page flags formulas that read missing fields.
• Editing: align selected lines of a paragraph, type a font size, choose Fill & Sign text colours, and keep a blank line as a paragraph break.
• Navigation: Alt+Left and Alt+Right go back and forward through the view history; the window title marks unsaved changes.
• Comments: edit or delete one reply from its own menu.
• Many rendering, forms and editing fixes, including CJK text in Windows GBK PDFs. Upstream's v0.16.1 notes list them.

Fork changes has the full list of what the fork adds, including what isn't implemented and why.

Downloads

System	Download
Windows	pdfcraft-0.16.1-windows-x64.msi, also x86 and arm64, or a -portable.zip
macOS	pdfcraft-0.16.1-macos-universal.dmg
Linux	.AppImage, .deb, .rpm, .tar.gz, .flatpak or Arch .pkg.tar.zst, for x86_64 and aarch64
Linux riscv64	.deb, .rpm or .tar.gz (glibc 2.39 or newer)
FreeBSD	pdfcraft-0.16.1-freebsd-x86_64.tar.gz or -aarch64.tar.gz
Web	pdfcraft-web-0.16.1.zip, a static site to host yourself
Command line only	pdfcraft-cli-0.16.1-*, for Linux and macOS

Download files, the pdfcraft and pdfcraft-cli programs, and the .deb and .rpm package names keep the upstream pdfcraft name, so upstream changes still merge. The app shows its name as PlutarchPages, and on Windows it installs to a PlutarchPages folder. The Flatpak (io.github.EquityBot.PlutarchPages) and the Arch package (plutarchpages) have their own names, so they don't replace upstream's.

Before you install

• The packages are unsigned, so Windows and macOS may warn about or block them. To check a download against SHA256SUMS.txt:

  sha256sum --check --ignore-missing SHA256SUMS.txt

• Don't install it alongside upstream PdfCraft on Windows. The 2 share some registry entries, because both use pdfcraft.exe, so this isn't supported.

• Upgrading from v0.15.0 is tested only for the Windows x64 installer. Other packages haven't been tested over an earlier build.

Report problems in Issues, and security problems privately as SECURITY.md describes.

Licence: MIT or Apache-2.0. All changes: v0.15.0 to v0.16.1.

PlutarchPages v0.15.0

PlutarchPages is a PDF reader and editor written in Rust, and a fork of PdfCraft. This is its first release. It includes upstream PdfCraft as of 30 October 2026.

What the fork adds

• Stricter security. Fixes for upstream's Document Open password, copy permission and redaction issues. Redaction refuses, and changes nothing, when content under the marks is also used where the marks don't reach. An empty password never skips the prompt or lifts restrictions. CSV exports write formula-like cells as text.
• More ways to create PDFs. From CSV, Markdown and email. Office files and web pages work through an installed LibreOffice, Chrome or Edge; these converters are off by default and aren't sandboxed, so use them only on files and pages you trust.
• More tools. Read Out Loud, bookmark colours and styles, extra PDF Optimizer options, grayscale conversion and export to Excel.
• A new colour scheme, used across the interface and the app icon.

Fork changes has the full list, including what isn't implemented and why.

Downloads

System	Download
Windows	pdfcraft-0.15.0-windows-x64.msi, also x86 and arm64, or a -portable.zip
macOS	pdfcraft-0.15.0-macos-universal.dmg
Linux	.AppImage, .deb, .rpm or .tar.gz, for x86_64 and aarch64
Command line only	pdfcraft-cli-0.15.0-*, for Linux and macOS

Files, programs and settings folders keep the upstream pdfcraft name, so upstream changes still merge. The app shows its name as PlutarchPages.

Flatpak, Arch, FreeBSD, riscv64 and web packages aren't built yet.

Before you install

• The packages are unsigned, so Windows and macOS may warn about or block them. To check a download against SHA256SUMS.txt:

  sha256sum --check --ignore-missing SHA256SUMS.txt

• Don't install it alongside upstream PdfCraft on Windows. The 2 share some registry entries, because both use pdfcraft.exe, so this isn't supported.

• Installing over an earlier build hasn't been tested, because this is the first release.

Report problems in Issues, and security problems privately as SECURITY.md describes.

Licence: MIT or Apache-2.0. All changes: commit history.