This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+8 more
Summary
AI summaryFixed version string drift causing misreported engine versions and incorrect manifest signatures.
Full changelog
Fixes a version string that had drifted. Use this release instead of 1.8.3.
1.8.3 shipped to PyPI reporting itself as 1.8.2: pyproject.toml was bumped, the literal in src/pdfmux/__init__.py was not. __version__ is now derived from the installed package metadata (importlib.metadata.version), so the two can never disagree again.
This is not cosmetic. verifier.py stamps that string into every certification manifest as the tool field, so a stale literal made a signed artifact misstate which engine produced it. pdfmux --version and pdfmux doctor were wrong for the same reason.
No other changes. Everything in v1.8.3 — pdfmux verify-manifest, the hard-terminating extraction timeout, the CLI link fixes — ships here.
What 1.8.x gives you
pdfmux verify-manifest <file>— verify a Cloud Ed25519-signed manifest offline. Free, MIT, no account.pdfmux verify— audit any extractor's output against the source PDF (Reducto, LlamaParse, Mistral OCR, Docling, your in-house parser) and get the pages it silently dropped.- 7-tool MCP server (
pdfmux serve), includingverify_extraction.
pip install -U pdfmux
Full notes in CHANGELOG.md. Published to PyPI: https://pypi.org/project/pdfmux/1.8.4/
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About NameetP/pdfmux
PDF extraction router with built-in MCP server. Classifies each page (digital, scanned, tables) and routes to the best backend (PyMuPDF, Docling, OCR, or optional LLM fallback)
Beta — feedback welcome: [email protected]