TRENCHCOAT
App blueprint · 14 Oct 2026

storytold/pdfcraft

PdfCraft: An open-source PDF reader and editor written by scratch in pure Rust

Template-written 45 evidence items Apache-2.0REA + LIEF read 2 executables378 source files scanned
What this means for you

pdfcraft has no known tracking or crash-reporting libraries, and its code names 13 outside services.E1E10E24E33

  • It's open source under the Apache License 2.0 licence, so anyone can read and check its code.E2
  • No tracking SDKs found: None of its dependencies is a known analytics, telemetry or crash-reporting library.E1
  • Internet access: It contains code to connect to the internet.E38E43E5
  • Starts other programs: It can start other programs on your computer, for example to open files or links.E39E44
  • We opened the official download (pdfcraft) without running it: 20 web addresses built in.E37E41

What it is

  • The project describes itself as: “PdfCraft: An open-source PDF reader and editor written by scratch in pure Rust”E1
  • It's written mainly in Rust (files: rs, toml, json, yml).E1
  • The latest release (v0.7.1) has downloads for FreeBSD, Linux, Windows and macOS.E4
  • 13149 people starred it on GitHub; the code was last updated 2026-10-14.E3

Where your data goes

Not identifiedServices we don't have in our list yet. 13
www.xfa.orgnot identified 42×E10E24E33
github.comnot identified 35×E8E17E29
www.aiim.orgnot identified 5×E14E18E28
www.npes.orgnot identified 5×E15E19E30
a.orgnot identified 3×E12
api.github.comnot identified 2×E9E23
blog.demofox.orgnot identified 2×E22
crl.entrust.netnot identified 2×E16
fontdasu.comnot identified 2×E26E35
scripts.sil.orgnot identified 2×E27E36
www.intnot identified 2×E21E32
www.worldnot identified 2×E20E31
xn--pypal-4ve.comnot identified 1×E13

What it can do on your computer

No tracking SDKs found

None of its dependencies is a known analytics, telemetry or crash-reporting library. Signals: dependency scan.E1

dependency scan

Internet access

It contains code to connect to the internet. Signals: ureq (HTTP client), connect, getaddrinfo, recv and 1 more.E38E43E5

ureq (HTTP client)connectgetaddrinforecvsend

Starts other programs

It can start other programs on your computer, for example to open files or links. Signals: execvp, fork and posix_spawnp.E39E44

execvpforkposix_spawnp

Loads extra code

It can load code libraries while running (often graphics drivers, plugins or scripts). Signals: dlopen.E40

dlopen

Clipboard

Can read or write your clipboard. Signals: clipboard access.E7

clipboard access

Keychain

Stores passwords or tokens in your system keychain. Signals: OS keychain / passwords.E6

OS keychain / passwords

What it's built from

Libraries in its dependency files that tell you something about what it does. The many ordinary ones are left out.

LibraryWhat it's forDeclared in
ureqE5ureq (HTTP client)apps/pdfcraft/Cargo.toml:14
arboardE7clipboard accesscrates/ui-egui/Cargo.toml:39
security-frameworkE6OS keychain / passwordscrates/sign/Cargo.toml:51

The app you download

We downloaded pdfcraft-0.7.1-linux-x86_64.tar.gz (84.6 MB) from the project's latest release and read it without running it.

pdfcraft

Format
ELF · 91.0 MB
Libraries
4: ld-linux-x86-64.so.2, libc.so.6, libgcc_s.so.1, libm.so.6
Network
connect, getaddrinfo, recv, send, socket
Starts programs
execvp, fork, posix_spawnp
Loads code
dlopen
Web addresses
11: github.com, www.aiim.org, www.npes.org, www.world, www.int, blog.demofox.org, api.github.com, www.xfa.org, getartcraft.com, fontdasu.com, scripts.sil.org

E37E38E39E40E41

pdfcraft-cli

Format
ELF · 61.5 MB
Libraries
4: ld-linux-x86-64.so.2, libc.so.6, libgcc_s.so.1, libm.so.6
Network
connect, getaddrinfo, recv, send, socket
Starts programs
execvp, fork, posix_spawnp
Web addresses
9: www.aiim.org, github.com, www.npes.org, www.world, www.int, www.xfa.org, getartcraft.com, fontdasu.com, scripts.sil.org

E42E43E44E45

The latest release (v0.7.1) has downloads for FreeBSD, Linux, Windows, macOS.

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Repository: storytold/pdfcraft
PdfCraft: An open-source PDF reader and editor written by scratch in pure Rust
GitHub description · https://github.com/storytold/pdfcraft
E2
Licence: Apache License 2.0
GitHub license · https://github.com/storytold/pdfcraft
E3
13149 stars, last push 2026-10-14
GitHub activity · https://github.com/storytold/pdfcraft
E4
Latest release v0.7.1 (2026-10-12) with 28 files
GitHub release · https://github.com/storytold/pdfcraft/releases/tag/v0.7.1
E5
Depends on ureq (ureq (HTTP client))
apps/pdfcraft/Cargo.toml @ 14:None · “ureq” · manifest scan
E6
Depends on security-framework (OS keychain / passwords)
crates/sign/Cargo.toml @ 51:None · “security-framework” · manifest scan
E7
Depends on arboard (clipboard access)
crates/ui-egui/Cargo.toml @ 39:None · “arboard” · manifest scan
E8
Web address in source: github.com/storytold/pdfcraft
Cargo.toml @ 12:15 · “github.com/storytold/pdfcraft” · source scan
E9
Web address in source: api.github.com/repos/storytold/pdfcraft/releases/latest
apps/pdfcraft/src/updates.rs @ 7:23 · “api.github.com/repos/storytold/pdfcraft/releases/latest” · source scan
E10
Web address in source: www.xfa.org/schema/xfa-data/1.0/
crates/annot/src/lib.rs @ 1485:90 · “www.xfa.org/schema/xfa-data/1.0/” · source scan
E11
Web address in source: getartcraft.com
crates/engine/src/links.rs @ 11:28 · “getartcraft.com” · source scan
E12
Web address in source: a.org/
crates/engine/src/links.rs @ 582:14 · “a.org/” · source scan
E13
Web address in source: xn--pypal-4ve.com/
crates/engine/src/links.rs @ 718:34 · “xn--pypal-4ve.com/” · source scan
E14
Web address in source: www.aiim.org/pdfa/ns/id/
crates/forms/src/tests.rs @ 482:150 · “www.aiim.org/pdfa/ns/id/” · source scan
E15
Web address in source: www.npes.org/pdfx/ns/id/
crates/organize/src/pdfx.rs @ 138:20 · “www.npes.org/pdfx/ns/id/” · source scan
E16
Web address in source: crl.entrust.net/2048ca.crl
crates/sign/src/x509.rs @ 608:21 · “crl.entrust.net/2048ca.crl” · source scan
E17
Web address inside the released app: github.com/emilk/egui/issues
pdfcraft @ byte 0x287864 · “github.com/emilk/egui/issues” · string scan
E18
Web address inside the released app: www.aiim.org/pdfa/ns/id/
pdfcraft @ byte 0x2c49ec · “www.aiim.org/pdfa/ns/id/” · string scan
E19
Web address inside the released app: www.npes.org/pdfx/ns/id/
pdfcraft @ byte 0x2cf9d1 · “www.npes.org/pdfx/ns/id/” · string scan
E20
Web address inside the released app: www.world
pdfcraft @ byte 0x365cbc · “www.world” · string scan
E21
Web address inside the released app: www.int
pdfcraft @ byte 0x36ca4f · “www.int” · string scan
E22
Web address inside the released app: blog.demofox.org/2022/01/01/interleaved-gradient-noise-a-different-kind-of-lo
pdfcraft @ byte 0x39274d · “blog.demofox.org/2022/01/01/interleaved-gradient-noise-a-different-kind-of-lo” · string scan
E23
Web address inside the released app: api.github.com/repos/storytold/pdfcraft/releases/latestAcceptapplication/vn
pdfcraft @ byte 0x62a43a · “api.github.com/repos/storytold/pdfcraft/releases/latestAcceptapplication/vn” · string scan
E24
Web address inside the released app: www.xfa.org/schema/xfa-data/1.0/
pdfcraft @ byte 0x63112e · “www.xfa.org/schema/xfa-data/1.0/” · string scan
E25
Web address inside the released app: getartcraft.com/apps/pdfcraftglobehelp.githubPdfCraft
pdfcraft @ byte 0x640415 · “getartcraft.com/apps/pdfcraftglobehelp.githubPdfCraft” · string scan
E26
Web address inside the released app: fontdasu.com
pdfcraft @ byte 0xe56fec · “fontdasu.com” · string scan
E27
Web address inside the released app: scripts.sil.org/OFLhttps
pdfcraft @ byte 0xe57088 · “scripts.sil.org/OFLhttps” · string scan
E28
Web address inside the released app: www.aiim.org/pdfa/ns/id/
pdfcraft-cli @ byte 0x1df630 · “www.aiim.org/pdfa/ns/id/” · string scan
E29
Web address inside the released app: github.com/J-F-Liu/lopdf/
pdfcraft-cli @ byte 0x1e447c · “github.com/J-F-Liu/lopdf/” · string scan
E30
Web address inside the released app: www.npes.org/pdfx/ns/id/
pdfcraft-cli @ byte 0x1e49a2 · “www.npes.org/pdfx/ns/id/” · string scan
E31
Web address inside the released app: www.world
pdfcraft-cli @ byte 0x25378c · “www.world” · string scan
E32
Web address inside the released app: www.int
pdfcraft-cli @ byte 0x25a51f · “www.int” · string scan
E33
Web address inside the released app: www.xfa.org/schema/xfa-data/1.0/
pdfcraft-cli @ byte 0x356e2a · “www.xfa.org/schema/xfa-data/1.0/” · string scan
E34
Web address inside the released app: getartcraft.com/apps/pdfcraftPdfCraft
pdfcraft-cli @ byte 0x35a437 · “getartcraft.com/apps/pdfcraftPdfCraft” · string scan
E35
Web address inside the released app: fontdasu.com
pdfcraft-cli @ byte 0xb8b11c · “fontdasu.com” · string scan
E36
Web address inside the released app: scripts.sil.org/OFLhttps
pdfcraft-cli @ byte 0xb8b1b8 · “scripts.sil.org/OFLhttps” · string scan
E37
REA identified pdfcraft as elf (sha256 722848740ee7…)
pdfcraft · “722848740ee7b9a4” · REA inspect-artifact
E38
pdfcraft imports network functions: connect, getaddrinfo, recv, send, socket
pdfcraft · “connect, getaddrinfo, recv, send” · LIEF import table
E39
pdfcraft imports functions that start other programs: execvp, fork, posix_spawnp
pdfcraft · “execvp, fork, posix_spawnp” · LIEF import table
E40
pdfcraft can load code libraries at runtime (dlopen)
pdfcraft · “dlopen” · LIEF import table
E41
pdfcraft links 4 system libraries
pdfcraft · “ld-linux-x86-64.so.2, libc.so.6, libgcc_s.so.1, libm.so.6” · LIEF
E42
REA identified pdfcraft-cli as elf (sha256 4033ead5da10…)
pdfcraft-cli · “4033ead5da105767” · REA inspect-artifact
E43
pdfcraft-cli imports network functions: connect, getaddrinfo, recv, send, socket
pdfcraft-cli · “connect, getaddrinfo, recv, send” · LIEF import table
E44
pdfcraft-cli imports functions that start other programs: execvp, fork, posix_spawnp
pdfcraft-cli · “execvp, fork, posix_spawnp” · LIEF import table
E45
pdfcraft-cli links 4 system libraries
pdfcraft-cli · “ld-linux-x86-64.so.2, libc.so.6, libgcc_s.so.1, libm.so.6” · LIEF

Limits

  • We read the app's code and its official download without running it. Code that exists may never run for you, and behaviour decided by servers is invisible.
  • Web addresses and libraries show what the app can talk to or do, not that it does so every time you use it.
  • Only open-source apps with a public GitHub repository are analysed. The release we inspected may differ from builds in app stores.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id yButRyXx.