qpdf-compress 0.7.0 → 0.8.0

package/CHANGELOG.md

@@ -6,6 +6,35 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/), and this
 
 ## [Unreleased]
 
+## [0.8.0] - 2026-09-23
+
+### Fixed
+
+- **Embedded file stripping removed the lookup path but not the file.** Only the `/EmbeddedFiles` name tree was cleared, while the `/AF` associated-files array (PDF/A-3, PDF 2.0) and `/FileAttachment` annotations kept their own reference to the same file specification. The attachment therefore stayed in the output and was recoverable in full, while readers that resolve attachments by name — pdfium among them — no longer found it: the removal did not remove, and a legitimate consumer lost access. All three paths are now cleared, so the writer drops the file specification and its stream as unreferenced. ([#34](https://github.com/xonaman/nodejs-qpdf-compress/issues/34))
+
+### Added
+
+- `stripAttachments` option (default `true`, matching previous behaviour) to keep embedded file attachments. Hybrid invoices (ZUGFeRD / Factur-X) carry the invoice itself as an attachment, so `compress(pdf, { stripAttachments: false })` is what keeps such a document machine-readable. Note that the output is still not a conforming PDF/A-3: output intents and structure information are dropped in every mode.
+- A `with-attachment.pdf` fixture whose attachment is reachable through all three paths, and tests that search decompressed stream contents rather than raw bytes — with object streams on, a byte search can miss an attachment that is entirely intact.
+
+## [0.7.1] - 2026-07-15
+
+### Security
+
+- Verify the downloaded prebuilt binary against a per-platform SHA-256 pin shipped in the package before use, falling back to the checksum-pinned source build on mismatch or a missing pin. Closes the prebuilt-binary trust gap where a swapped GitHub release asset could be executed unverified.
+
+### Changed
+
+- The `update-native-deps` PR body now describes `verify-checksums` as a consistency check against the same source rather than "independent" verification.
+
+### Fixed
+
+- Corrected the HarfBuzz version recorded in `THIRD-PARTY-NOTICES.md` (14.1.0 → 14.2.1) to match the pinned dependency.
+
+### Added
+
+- Hermetic test coverage for prebuilt verification and manifest generation (`test/prebuild.test.ts`).
+
 ## [0.7.0] - 2026-06-27
 
 ### Added
@@ -193,7 +222,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/), and this
 - QEMU-based cross-compilation for Linux arm64/arm and musl variants
 - vcpkg integration for Windows static linking
 
-[Unreleased]: https://github.com/xonaman/nodejs-qpdf-compress/compare/v0.7.0...HEAD
+[Unreleased]: https://github.com/xonaman/nodejs-qpdf-compress/compare/v0.7.1...HEAD
+[0.7.1]: https://github.com/xonaman/nodejs-qpdf-compress/compare/v0.7.0...v0.7.1
 [0.7.0]: https://github.com/xonaman/nodejs-qpdf-compress/compare/v0.6.4...v0.7.0
 [0.6.4]: https://github.com/xonaman/nodejs-qpdf-compress/compare/v0.6.3...v0.6.4
 [0.6.3]: https://github.com/xonaman/nodejs-qpdf-compress/compare/v0.6.2...v0.6.3

package/README.md

@@ -71,7 +71,7 @@ const smaller = await compress(pdfBuffer, { lossy: true });
 | Form flattening           | ✅ Automatic          | ❌                | ❌                |
 | Stream deduplication      | ✅ Automatic          | ❌                | ❌                |
 | Content minification      | ✅ Automatic          | ❌                | ❌                |
-| JS/embedded file removal  | ✅ Automatic          | ❌                | ❌                |
+| JS/embedded file removal  | ✅ Default on         | ❌                | ❌                |
 | Metadata stripping        | ✅ Default on         | ✅ Manual flag    | ✅                |
 | PDF repair                | ✅ Automatic          | ✅ Manual flag    | ⚠️ Partial        |
 | License                   | Apache-2.0            | Apache-2.0        | AGPL-3.0 ⚠️       |
@@ -131,6 +131,9 @@ const smaller = await compress(pdfBuffer, { lossy: true });
 // keep metadata (stripped by default)
 const withMeta = await compress(pdfBuffer, { stripMetadata: false });
 
+// keep embedded file attachments (stripped by default)
+const withAttachments = await compress(pdfBuffer, { stripAttachments: false });
+
 // file path input (avoids copying into memory twice)
 const result = await compress('/path/to/file.pdf');
 
@@ -149,12 +152,15 @@ const fixed = await compress(damagedBuffer);
 
 Compresses a PDF document. Automatically repairs damaged PDFs.
 
-| Parameter               | Type               | Description                                                         |
-| ----------------------- | ------------------ | ------------------------------------------------------------------- |
-| `input`                 | `Buffer \| string` | PDF data or file path                                               |
-| `options.lossy`         | `boolean`          | Enable lossy compression. Default: `false`                          |
-| `options.stripMetadata` | `boolean`          | Remove XMP metadata, document info, and thumbnails. Default: `true` |
-| `options.output`        | `string`           | Write to file path instead of returning a `Buffer`                  |
+| Parameter                  | Type               | Description                                                         |
+| -------------------------- | ------------------ | ------------------------------------------------------------------- |
+| `input`                    | `Buffer \| string` | PDF data or file path                                               |
+| `options.lossy`            | `boolean`          | Enable lossy compression. Default: `false`                          |
+| `options.stripMetadata`    | `boolean`          | Remove XMP metadata, document info, and thumbnails. Default: `true` |
+| `options.stripAttachments` | `boolean`          | Remove embedded file attachments. Default: `true`                   |
+| `options.output`           | `string`           | Write to file path instead of returning a `Buffer`                  |
+
+> **Hybrid invoices (ZUGFeRD / Factur-X)**: the invoice XML rides along as an attachment, so the defaults remove it. Pass `stripAttachments: false` to keep the attachment and every path readers look it up through. The result is still not a conforming PDF/A-3 — output intents and structure information are dropped in every mode, and XMP metadata too unless `stripMetadata: false` — so a file that has to stay conformant should not be compressed at all.
 
 **Both modes:**
 
@@ -170,7 +176,8 @@ Compresses a PDF document. Automatically repairs damaged PDFs.
 - Flattens page tree (pushes inherited attributes to pages)
 - Coalesces multiple content streams per page into one
 - Minifies content streams (whitespace normalization, numeric formatting)
-- Strips embedded files and JavaScript actions
+- Strips embedded file attachments and every path to them — the `/EmbeddedFiles` name tree, `/AF` associated-file arrays, and `/FileAttachment` annotations (default: on)
+- Strips JavaScript actions
 - Recompresses all decodable streams with Flate level 9
 - Generates object streams for smaller metadata overhead
 - Removes unreferenced objects
@@ -231,9 +238,10 @@ All operations run in a background thread via `Napi::AsyncWorker`, so the event
 13. Coalesce multiple content streams per page
 14. Minify content streams
 15. Deduplicate identical non-image streams
-16. Strip embedded files and JavaScript
-17. _(optional)_ Strip metadata
-18. QPDFWriter: Flate 9, object streams, unreferenced object removal
+16. _(optional)_ Strip embedded file attachments
+17. Strip JavaScript
+18. _(optional)_ Strip metadata
+19. QPDFWriter: Flate 9, object streams, unreferenced object removal
 
 ## License
 

package/THIRD-PARTY-NOTICES.md

@@ -9,7 +9,7 @@ full license text of each is available from the upstream project linked.
 | -------- | ------------------ | --------------------------------------------------------- | -------------------------------------- |
 | QPDF     | 12.3.2             | Apache-2.0                                                | <https://github.com/qpdf/qpdf>         |
 | mozjpeg  | 4.1.1              | BSD-3-Clause and IJG (with zlib-licensed SIMD components) | <https://github.com/mozilla/mozjpeg>   |
-| HarfBuzz | 14.1.0             | MIT ("Old MIT")                                           | <https://github.com/harfbuzz/harfbuzz> |
+| HarfBuzz | 14.2.1             | MIT ("Old MIT")                                           | <https://github.com/harfbuzz/harfbuzz> |
 | zlib     | bundled on Windows | zlib License                                              | <https://github.com/madler/zlib>       |
 
 ## Details

package/dist/index.d.ts

@@ -8,6 +8,11 @@ type PdfInput = Buffer | string;
  * JPEG Huffman tables, recompresses all streams with Flate level 9,
  * generates object streams, and removes unreferenced objects.
  *
+ * Embedded file attachments are removed by default, along with every path
+ * they are reachable through. Pass `stripAttachments: false` to keep them —
+ * needed for hybrid invoices (ZUGFeRD / Factur-X), where the attachment is
+ * the document's payload rather than a rider on it.
+ *
  * With `lossy: true`, uses more aggressive image re-encoding (skips JPEGs
  * at q65 or below, re-encodes the rest at q75) and downscales to 72 DPI.
  * Text, vectors, and fonts are preserved.

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../lib/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAe,MAAM,YAAY,CAAC;AAc/D,KAAK,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;AAEhC;;;;;;;;;;;GAWG;AACH,wBAAgB,QAAQ,CACtB,KAAK,EAAE,QAAQ,EACf,OAAO,EAAE,eAAe,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5C,OAAO,CAAC,IAAI,CAAC,CAAC;AACjB,wBAAgB,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AA2BtF,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC3F,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../lib/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAe,MAAM,YAAY,CAAC;AAc/D,KAAK,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;AAEhC;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,QAAQ,CACtB,KAAK,EAAE,QAAQ,EACf,OAAO,EAAE,eAAe,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5C,OAAO,CAAC,IAAI,CAAC,CAAC;AACjB,wBAAgB,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AA6BtF,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC3F,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -27,10 +27,12 @@ export async function compress(input, options) {
         throw new TypeError('Input must be a Buffer or file path string');
     }
     const stripMetadata = options?.stripMetadata ?? true;
+    const stripAttachments = options?.stripAttachments ?? true;
     try {
         return await withConcurrency(() => addon.compress(input, {
             ...(options?.lossy ? { lossy: true } : {}),
             ...(stripMetadata ? { stripMetadata: true } : {}),
+            ...(stripAttachments ? { stripAttachments: true } : {}),
             ...(options?.output ? { output: options.output } : {}),
         }));
     }

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../lib/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAG/C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1D,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAC9D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;AAC7D,CAAC;AAED,8EAA8E;AAC9E,kEAAkE;AAClE,MAAM,KAAK,GAAG,OAAO,CAAC,qCAAqC,CAAgB,CAAC;AAqB5E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAe,EAAE,OAAyB;IACvE,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,IAAI,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,MAAM,eAAe,CAAC,GAAG,EAAE,CAChC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE;YACpB,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../lib/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAG/C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1D,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAC9D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;AAC7D,CAAC;AAED,8EAA8E;AAC9E,kEAAkE;AAClE,MAAM,KAAK,GAAG,OAAO,CAAC,qCAAqC,CAAgB,CAAC;AA0B5E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAe,EAAE,OAAyB;IACvE,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,IAAI,CAAC;IACrD,MAAM,gBAAgB,GAAG,OAAO,EAAE,gBAAgB,IAAI,IAAI,CAAC;IAC3D,IAAI,CAAC;QACH,OAAO,MAAM,eAAe,CAAC,GAAG,EAAE,CAChC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE;YACpB,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}

package/dist/types.d.ts

@@ -3,6 +3,8 @@ export interface CompressOptions {
     readonly lossy?: boolean;
     /** Remove XMP metadata, document info, and thumbnails. Default: true. */
     readonly stripMetadata?: boolean;
+    /** Remove embedded file attachments. Default: true. */
+    readonly stripAttachments?: boolean;
     /** Write to this file path instead of returning a Buffer. */
     readonly output?: string;
 }
@@ -10,6 +12,7 @@ export interface NativeAddon {
     compress(input: Buffer | string, options: {
         lossy?: boolean;
         stripMetadata?: boolean;
+        stripAttachments?: boolean;
         output?: string;
     }): Promise<Buffer | undefined>;
 }

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../lib/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,mFAAmF;IACnF,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,yEAAyE;IACzE,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CACN,KAAK,EAAE,MAAM,GAAG,MAAM,EACtB,OAAO,EAAE;QACP,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GACA,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAChC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../lib/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,mFAAmF;IACnF,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,yEAAyE;IACzE,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,uDAAuD;IACvD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CACN,KAAK,EAAE,MAAM,GAAG,MAAM,EACtB,OAAO,EAAE;QACP,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GACA,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAChC"}

package/lib/index.ts

@@ -27,6 +27,11 @@ type PdfInput = Buffer | string;
  * JPEG Huffman tables, recompresses all streams with Flate level 9,
  * generates object streams, and removes unreferenced objects.
  *
+ * Embedded file attachments are removed by default, along with every path
+ * they are reachable through. Pass `stripAttachments: false` to keep them —
+ * needed for hybrid invoices (ZUGFeRD / Factur-X), where the attachment is
+ * the document's payload rather than a rider on it.
+ *
  * With `lossy: true`, uses more aggressive image re-encoding (skips JPEGs
  * at q65 or below, re-encodes the rest at q75) and downscales to 72 DPI.
  * Text, vectors, and fonts are preserved.
@@ -49,11 +54,13 @@ export async function compress(input: PdfInput, options?: CompressOptions): Prom
     throw new TypeError('Input must be a Buffer or file path string');
   }
   const stripMetadata = options?.stripMetadata ?? true;
+  const stripAttachments = options?.stripAttachments ?? true;
   try {
     return await withConcurrency(() =>
       addon.compress(input, {
         ...(options?.lossy ? { lossy: true } : {}),
         ...(stripMetadata ? { stripMetadata: true } : {}),
+        ...(stripAttachments ? { stripAttachments: true } : {}),
         ...(options?.output ? { output: options.output } : {}),
       }),
     );

package/lib/types.ts

@@ -3,6 +3,8 @@ export interface CompressOptions {
   readonly lossy?: boolean;
   /** Remove XMP metadata, document info, and thumbnails. Default: true. */
   readonly stripMetadata?: boolean;
+  /** Remove embedded file attachments. Default: true. */
+  readonly stripAttachments?: boolean;
   /** Write to this file path instead of returning a Buffer. */
   readonly output?: string;
 }
@@ -13,6 +15,7 @@ export interface NativeAddon {
     options: {
       lossy?: boolean;
       stripMetadata?: boolean;
+      stripAttachments?: boolean;
       output?: string;
     },
   ): Promise<Buffer | undefined>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "qpdf-compress",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "Native PDF compression for Node.js, powered by QPDF",
   "license": "Apache-2.0",
   "type": "module",
@@ -96,16 +96,16 @@
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
-    "@types/node": "^25.5.0",
+    "@types/node": "^22.0.0",
     "@vitest/coverage-v8": "^4.1.4",
     "eslint": "^10.1.0",
     "eslint-config-prettier": "^10.1.8",
     "globals": "^17.0.0",
     "husky": "^9.1.7",
-    "lint-staged": "^16.4.0",
+    "lint-staged": "^17.0.8",
     "node-gyp": "^13.0.0",
     "prettier": "^3.8.1",
-    "typescript": "^5.9.3",
+    "typescript": "^6.0.3",
     "typescript-eslint": "^8.57.2",
     "vitest": "^4.1.4"
   }

package/scripts/gen-prebuild-manifest.mjs

@@ -0,0 +1,59 @@
+/**
+ * Generate `scripts/prebuilds.json`: a map of "<platform>-<arch>" -> SHA-256 of
+ * each prebuilt release tarball.
+ *
+ * Run in the release workflow AFTER the prebuild artifacts are downloaded and
+ * BEFORE `npm publish`, so the pins ship *inside* the published (SLSA-attested)
+ * npm package. `install.mjs` then verifies a downloaded prebuilt against the
+ * pin baked into the package, closing the prebuilt-binary trust gap: a swapped
+ * GitHub release asset will not match the pin and falls back to the
+ * checksum-pinned source build.
+ *
+ * Usage: node scripts/gen-prebuild-manifest.mjs <artifacts-dir>
+ */
+import { readdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { sha256File } from './lib/integrity.mjs';
+
+/**
+ * Map every "<prefix>-v<version>-<platform>-<arch>.tar.gz" in `artifactsDir` to
+ * its SHA-256, keyed by "<platform>-<arch>" (matching install.mjs's lookup).
+ *
+ * @param {string} artifactsDir
+ * @param {string} version
+ * @returns {Promise<Record<string, string>>}
+ */
+export async function computePins(artifactsDir, version) {
+  // strip the "<prefix>-v<version>-" head and ".tar.gz" tail to recover the key
+  const headRe = new RegExp('^.*-v' + version.replace(/[.]/g, '\\.') + '-');
+  const files = readdirSync(artifactsDir)
+    .filter((f) => f.endsWith('.tar.gz'))
+    .sort();
+  const pins = {};
+  for (const file of files) {
+    const key = file.replace(/\.tar\.gz$/, '').replace(headRe, '');
+    pins[key] = await sha256File(join(artifactsDir, file));
+  }
+  return pins;
+}
+
+// CLI entrypoint (skipped when this module is imported, e.g. by tests)
+if (import.meta.url === pathToFileURL(process.argv[1] ?? '').href) {
+  const artifactsDir = process.argv[2];
+  if (!artifactsDir) {
+    console.error('usage: node scripts/gen-prebuild-manifest.mjs <artifacts-dir>');
+    process.exit(1);
+  }
+  const root = join(import.meta.dirname, '..');
+  const { version } = JSON.parse(readFileSync(join(root, 'package.json'), 'utf8'));
+  const pins = await computePins(artifactsDir, version);
+  if (Object.keys(pins).length === 0) {
+    console.error(`No .tar.gz artifacts found in ${artifactsDir}`);
+    process.exit(1);
+  }
+  for (const [key, sha] of Object.entries(pins)) console.log(`  ${key}  ${sha}`);
+  const out = join(root, 'scripts', 'prebuilds.json');
+  writeFileSync(out, JSON.stringify(pins, null, 2) + '\n');
+  console.log(`Wrote ${Object.keys(pins).length} prebuild pin(s) to ${out}`);
+}

package/scripts/install.mjs

@@ -11,12 +11,25 @@ import { createWriteStream, existsSync, mkdirSync, readFileSync, unlinkSync } fr
 import { join } from 'node:path';
 import { Readable } from 'node:stream';
 import { pipeline } from 'node:stream/promises';
-import { extractTarball } from './lib/integrity.mjs';
+import { extractTarball, verifyPrebuild } from './lib/integrity.mjs';
 
 const root = join(import.meta.dirname, '..');
 const pkg = JSON.parse(readFileSync(join(root, 'package.json'), 'utf8'));
 const version = pkg.version;
 
+// Per-platform SHA-256 pins for the prebuilt tarballs, generated at release
+// time (scripts/gen-prebuild-manifest.mjs) and shipped inside this package.
+// The prebuilt binary is the code that actually runs, so it is verified against
+// this pin before use; a swapped release asset fails the check and we fall back
+// to the checksum-pinned source build.
+function loadPrebuildPins() {
+  try {
+    return JSON.parse(readFileSync(join(import.meta.dirname, 'prebuilds.json'), 'utf8'));
+  } catch {
+    return {};
+  }
+}
+
 // validate version to prevent SSRF via malicious package.json
 if (!/^\d+\.\d+\.\d+(-[a-zA-Z0-9.]+)?$/.test(version)) {
   console.error(`Invalid version format: ${version}`);
@@ -74,6 +87,23 @@ async function tryDownload() {
 
     await pipeline(Readable.fromWeb(body), fileStream);
 
+    // verify the prebuilt against the pinned checksum before trusting it
+    const pinKey = `${platformKey}-${arch}`;
+    const check = await verifyPrebuild(tmpTar, pinKey, loadPrebuildPins());
+    if (!check.ok) {
+      if (check.reason === 'no-pin') {
+        console.log(
+          `No pinned checksum for ${pinKey}; refusing unverified prebuilt, will compile from source.`,
+        );
+      } else {
+        console.log(
+          `Prebuilt checksum mismatch for ${pinKey} (expected ${check.expected}, got ${check.actual}); will compile from source.`,
+        );
+      }
+      unlinkSync(tmpTar);
+      return false;
+    }
+
     // extract tar.gz into project root (hardened: no -P, no archived ownership)
     extractTarball(tmpTar, root);
     unlinkSync(tmpTar);

package/scripts/lib/integrity.mjs

@@ -32,6 +32,29 @@ export async function sha256File(path) {
   return hash.digest('hex');
 }
 
+/**
+ * Decide whether a downloaded prebuilt tarball is trusted by comparing its
+ * SHA-256 to the pin recorded for `pinKey` in `pins` (scripts/prebuilds.json).
+ * Returns a discriminated result so the installer can log and fall back to a
+ * source build instead of running an unverified binary.
+ *
+ * @param {string} tarPath
+ * @param {string} pinKey  e.g. "darwin-arm64" / "linux-musl-x64"
+ * @param {Record<string, string>} pins
+ * @returns {Promise<{ok: true, pinKey: string, sha256: string}
+ *   | {ok: false, reason: 'no-pin', pinKey: string}
+ *   | {ok: false, reason: 'mismatch', pinKey: string, expected: string, actual: string}>}
+ */
+export async function verifyPrebuild(tarPath, pinKey, pins) {
+  const expected = pins[pinKey];
+  if (!expected) return { ok: false, reason: 'no-pin', pinKey };
+  const actual = await sha256File(tarPath);
+  if (actual !== expected.toLowerCase()) {
+    return { ok: false, reason: 'mismatch', pinKey, expected, actual };
+  }
+  return { ok: true, pinKey, sha256: actual };
+}
+
 /** Read the native-dependency manifest (scripts/native-deps.json). */
 export function loadManifest() {
   return JSON.parse(readFileSync(join(import.meta.dirname, '..', 'native-deps.json'), 'utf8'));

package/scripts/native-deps.json

@@ -7,10 +7,10 @@
     "checksumSource": "official PGP-signed release manifest (qpdf-12.3.2.sha256)"
   },
   "harfbuzz": {
-    "version": "14.1.0",
+    "version": "14.2.1",
     "origin": "https://github.com",
-    "url": "https://github.com/harfbuzz/harfbuzz/archive/refs/tags/14.1.0.tar.gz",
-    "sha256": "9deffe9dded3c367c7d08265fd0a64193fad505a362a4889d898568c1cd46812",
+    "url": "https://github.com/harfbuzz/harfbuzz/archive/refs/tags/14.2.1.tar.gz",
+    "sha256": "3c2a9006a7e1bf58737e557014d7882c554c628fb379a9f00008f5ea53dbbdfb",
     "checksumSource": "self-computed from the GitHub git-archive tarball; HarfBuzz's only release asset is .tar.xz, whose extraction hangs Windows bsdtar — the gzip git-archive builds identically"
   },
   "mozjpeg": {

package/scripts/prebuilds.json

@@ -0,0 +1,11 @@
+{
+  "darwin-arm64": "91bce035bd98d4c5b51eb3c43bb4b3f1734768d4edb47042cce4dbb7b73bd001",
+  "darwin-x64": "fe1fdd42d8ff24e5ed3777ced647d29f9878d0dde347b3925af3b388d49f4e15",
+  "linux-arm": "478c10a51adefddc6f4cccc580edcb0d2242e8b155d495aac6ae2dc57ec96c10",
+  "linux-arm64": "6f09b7b95ffdb382430e8d474fdad4664058210863668e85130d5f76d157796e",
+  "linux-musl-arm64": "aee2f73320bb8d911be2dbfd657fd36ad7d767f27e5257fd8060d8c53b930c37",
+  "linux-musl-x64": "0fa4510d0aac780f955880bf511e086b9c88af97f87d348f97569859d65d191d",
+  "linux-x64": "75b2b183f810af513c7905406c695e325b39d5ef6125a8845465b75985515f0d",
+  "win32-arm64": "fbac6517c8ea188ea9cfb72c5daac0e6b90a5cb8e185a6e1cf7dff116b4ff032",
+  "win32-x64": "6b0a6f16c5cbe881aa3b4da12dcd138a637cf0b6764505a0e82a8b23df4d48d9"
+}

package/scripts/update-native-deps.mjs

@@ -0,0 +1,129 @@
+/**
+ * Check each native dependency in native-deps.json for a newer upstream GitHub
+ * release and, when found, re-pin the version and re-hash the asset(s).
+ *
+ * This is the piece Dependabot cannot do: the prebuilt/source native libraries
+ * are upstream release tarballs, not a package-manager ecosystem. Runs in CI
+ * (see .github/workflows/update-native-deps.yml) and emits a markdown summary
+ * for the pull-request body via GITHUB_OUTPUT.
+ *
+ * Supports both manifest shapes:
+ *  - per-platform "targets" (baseUrl + { asset, sha256 } map), version == full tag
+ *  - single "url" + "sha256", version == numeric (tag with any v/n prefix stripped)
+ *
+ * Only upstreams that publish a GitHub Release are tracked; a dependency whose
+ * repo has no usable release is skipped with a warning (kept manual) rather than
+ * guessed from noisy git tags.
+ */
+import { createHash } from 'node:crypto';
+import { appendFileSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { Readable } from 'node:stream';
+import { pipeline } from 'node:stream/promises';
+
+const manifestPath = join(import.meta.dirname, 'native-deps.json');
+const manifest = JSON.parse(readFileSync(manifestPath, 'utf8'));
+
+const token = process.env.GITHUB_TOKEN;
+const apiHeaders = {
+  accept: 'application/vnd.github+json',
+  'user-agent': 'update-native-deps',
+  ...(token ? { authorization: `Bearer ${token}` } : {}),
+};
+
+// derive "OWNER/REPO" from a github.com baseUrl (targets shape) or url (single)
+function repoFor(dep) {
+  const source = dep.baseUrl ?? dep.url;
+  const match = /^https:\/\/github\.com\/([^/]+\/[^/]+)/.exec(source ?? '');
+  if (!match) throw new Error(`cannot derive a github.com OWNER/REPO from: ${source}`);
+  return match[1];
+}
+
+// returns the latest release tag, or null when the repo publishes no release
+async function latestReleaseTag(repo) {
+  const res = await fetch(`https://api.github.com/repos/${repo}/releases/latest`, {
+    headers: apiHeaders,
+    signal: AbortSignal.timeout(30000),
+  });
+  if (res.status === 404) return null;
+  if (!res.ok) throw new Error(`GitHub API returned HTTP ${res.status} for ${repo} latest release`);
+  const { tag_name: tag } = await res.json();
+  if (!tag) throw new Error(`latest release for ${repo} has no tag_name`);
+  return tag;
+}
+
+async function sha256Url(url, allowedOrigin) {
+  const parsed = new URL(url);
+  if (allowedOrigin && parsed.origin !== allowedOrigin) {
+    throw new Error(`refusing to fetch from unexpected origin: ${parsed.origin}`);
+  }
+  const res = await fetch(parsed, { redirect: 'follow', signal: AbortSignal.timeout(120000) });
+  if (!res.ok) throw new Error(`HTTP ${res.status} for ${parsed.href}`);
+  if (!res.body) throw new Error(`empty response body for ${parsed.href}`);
+  const hash = createHash('sha256');
+  await pipeline(Readable.fromWeb(res.body), hash);
+  return hash.digest('hex');
+}
+
+const changes = [];
+for (const [name, dep] of Object.entries(manifest)) {
+  const repo = repoFor(dep);
+  const tag = await latestReleaseTag(repo);
+  if (tag === null) {
+    console.warn(`${name}: ${repo} publishes no GitHub release; skipping (update manually)`);
+    continue;
+  }
+
+  if (dep.targets) {
+    // targets shape: version is the full tag (e.g. "chromium/7920")
+    if (tag === dep.version) {
+      console.log(`${name}: up to date (${dep.version})`);
+      continue;
+    }
+    console.log(
+      `${name}: ${dep.version} -> ${tag}; re-hashing ${Object.keys(dep.targets).length} targets`,
+    );
+    for (const [key, target] of Object.entries(dep.targets)) {
+      const url = `${dep.baseUrl}/${encodeURIComponent(tag)}/${target.asset}`;
+      target.sha256 = await sha256Url(url, dep.origin);
+      console.log(`  ${key}: ${target.sha256}`);
+    }
+    changes.push({ name, from: dep.version, to: tag });
+    dep.version = tag;
+  } else {
+    // single-url shape: manifest version is numeric; the tag may carry a v/n
+    // prefix. The url embeds the version string, so a plain substitution rebuilds
+    // both the tag segment and the filename.
+    const version = tag.replace(/^[^0-9]*/, '');
+    if (version === dep.version) {
+      console.log(`${name}: up to date (${dep.version})`);
+      continue;
+    }
+    const url = dep.url.replaceAll(dep.version, version);
+    console.log(`${name}: ${dep.version} -> ${version}; re-hashing`);
+    dep.sha256 = await sha256Url(url, dep.origin);
+    dep.url = url;
+    changes.push({ name, from: dep.version, to: version });
+    dep.version = version;
+  }
+}
+
+if (changes.length === 0) {
+  console.log('\nAll native dependencies are up to date.');
+} else {
+  writeFileSync(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`);
+  const summary = changes.map((c) => `- **${c.name}**: \`${c.from}\` → \`${c.to}\``).join('\n');
+  console.log(`\n${summary}`);
+
+  if (process.env.GITHUB_OUTPUT) {
+    const body = [
+      'Automated native dependency update.',
+      '',
+      summary,
+      '',
+      'Checksums were recomputed from the upstream release assets. `verify-checksums` re-downloads each asset and confirms it matches the recorded hash — a consistency check against the same source, not independent provenance.',
+    ].join('\n');
+    appendFileSync(process.env.GITHUB_OUTPUT, 'changed=true\n');
+    appendFileSync(process.env.GITHUB_OUTPUT, `body<<PR_BODY_EOF\n${body}\nPR_BODY_EOF\n`);
+  }
+}

package/src/qpdf_addon.cc

@@ -101,18 +101,18 @@ class CompressWorker : public Napi::AsyncWorker {
 public:
   // buffer variant
   CompressWorker(Napi::Env env, std::vector<uint8_t> data, bool lossy,
-                 bool stripMeta, std::string outputPath)
+                 bool stripMeta, bool stripAttach, std::string outputPath)
       : Napi::AsyncWorker(env), deferred_(Napi::Promise::Deferred::New(env)),
         envAlive_(GetEnvAlive(env)), bufferData_(std::move(data)),
-        lossy_(lossy), stripMeta_(stripMeta), useFile_(false),
-        outputPath_(std::move(outputPath)) {}
+        lossy_(lossy), stripMeta_(stripMeta), stripAttach_(stripAttach),
+        useFile_(false), outputPath_(std::move(outputPath)) {}
 
   // file path variant
   CompressWorker(Napi::Env env, std::string path, bool lossy, bool stripMeta,
-                 std::string outputPath)
+                 bool stripAttach, std::string outputPath)
       : Napi::AsyncWorker(env), deferred_(Napi::Promise::Deferred::New(env)),
         envAlive_(GetEnvAlive(env)), filePath_(std::move(path)), lossy_(lossy),
-        stripMeta_(stripMeta), useFile_(true),
+        stripMeta_(stripMeta), stripAttach_(stripAttach), useFile_(true),
         outputPath_(std::move(outputPath)) {}
 
   Napi::Promise Promise() { return deferred_.Promise(); }
@@ -187,7 +187,8 @@ protected:
       coalesceContentStreams(*qpdf);
       minifyContentStreams(*qpdf);
       deduplicateStreams(*qpdf);
-      stripEmbeddedFiles(*qpdf);
+      if (stripAttach_)
+        stripEmbeddedFiles(*qpdf);
       stripJavaScript(*qpdf);
       if (stripMeta_)
         stripMetadata(*qpdf);
@@ -267,6 +268,7 @@ private:
   std::string filePath_;
   bool lossy_;
   bool stripMeta_;
+  bool stripAttach_;
   bool useFile_;
   std::string outputPath_;
   std::shared_ptr<Buffer> writerBuf_;
@@ -287,6 +289,7 @@ static Napi::Value Compress(const Napi::CallbackInfo &info) {
 
   bool lossy = false;
   bool stripMeta = false;
+  bool stripAttach = false;
   std::string outputPath;
 
   if (info.Length() >= 2 && info[1].IsObject()) {
@@ -298,6 +301,9 @@ static Napi::Value Compress(const Napi::CallbackInfo &info) {
     if (options.Has("stripMetadata"))
       stripMeta = options.Get("stripMetadata").As<Napi::Boolean>().Value();
 
+    if (options.Has("stripAttachments"))
+      stripAttach = options.Get("stripAttachments").As<Napi::Boolean>().Value();
+
     if (options.Has("output"))
       outputPath = options.Get("output").As<Napi::String>().Utf8Value();
   }
@@ -306,7 +312,7 @@ static Napi::Value Compress(const Napi::CallbackInfo &info) {
     auto buf = info[0].As<Napi::Buffer<uint8_t>>();
     std::vector<uint8_t> data(buf.Data(), buf.Data() + buf.Length());
     auto *worker = new CompressWorker(env, std::move(data), lossy, stripMeta,
-                                      std::move(outputPath));
+                                      stripAttach, std::move(outputPath));
     worker->Queue();
     return worker->Promise();
   }
@@ -314,7 +320,7 @@ static Napi::Value Compress(const Napi::CallbackInfo &info) {
   if (info[0].IsString()) {
     auto path = info[0].As<Napi::String>().Utf8Value();
     auto *worker = new CompressWorker(env, std::move(path), lossy, stripMeta,
-                                      std::move(outputPath));
+                                      stripAttach, std::move(outputPath));
     worker->Queue();
     return worker->Promise();
   }

package/src/strip.cc

@@ -2,6 +2,7 @@
 
 #include <set>
 #include <string>
+#include <vector>
 
 #include <qpdf/QPDFObjectHandle.hh>
 #include <qpdf/QPDFPageDocumentHelper.hh>
@@ -45,24 +46,69 @@ void stripMetadata(QPDF &qpdf) {
 }
 
 // ---------------------------------------------------------------------------
-// Embedded file stripping — remove /EmbeddedFiles from the name tree
+// Embedded file stripping — remove every path an attachment is reachable
+// through
 // ---------------------------------------------------------------------------
 
+static void removeAssociatedFiles(QPDFObjectHandle obj) {
+  auto dict = obj.isStream() ? obj.getDict() : obj;
+  if (dict.isDictionary() && dict.hasKey("/AF"))
+    dict.removeKey("/AF");
+}
+
+// an embedded file stream is reachable three ways: the /EmbeddedFiles name
+// tree, an /AF associated-files array (PDF/A-3 and PDF 2.0), and a
+// /FileAttachment annotation. Dropping only the name tree leaves the payload
+// in the file and fully recoverable while hiding it from readers that look
+// attachments up by name, so all three have to go — once nothing references
+// the file specification, the writer drops it and its stream as unreferenced.
 void stripEmbeddedFiles(QPDF &qpdf) {
   auto root = qpdf.getRoot();
-  if (!root.hasKey("/Names"))
-    return;
 
-  auto names = root.getKey("/Names");
-  if (!names.isDictionary())
-    return;
+  if (root.hasKey("/Names")) {
+    auto names = root.getKey("/Names");
+    if (names.isDictionary()) {
+      if (names.hasKey("/EmbeddedFiles"))
+        names.removeKey("/EmbeddedFiles");
+
+      // if /Names is now empty, remove it too
+      if (names.getKeys().empty())
+        root.removeKey("/Names");
+    }
+  }
+
+  // /AF may hang off the catalog, a page, an XObject, or an annotation
+  for (auto &obj : qpdf.getAllObjects())
+    removeAssociatedFiles(obj);
+
+  for (auto &page : QPDFPageDocumentHelper(qpdf).getAllPages()) {
+    auto pageObj = page.getObjectHandle();
+    auto annots = pageObj.getKey("/Annots");
+    if (!annots.isArray())
+      continue;
+
+    std::vector<QPDFObjectHandle> kept;
+    for (int i = 0; i < annots.getArrayNItems(); ++i) {
+      auto annot = annots.getArrayItem(i);
+      // a directly embedded annotation dictionary is not an object of its own,
+      // so the sweep above does not reach it
+      removeAssociatedFiles(annot);
+      if (annot.isDictionary()) {
+        auto subtype = annot.getKey("/Subtype");
+        if (subtype.isName() && subtype.getName() == "/FileAttachment")
+          continue;
+      }
+      kept.push_back(annot);
+    }
 
-  if (names.hasKey("/EmbeddedFiles"))
-    names.removeKey("/EmbeddedFiles");
+    if (static_cast<int>(kept.size()) == annots.getArrayNItems())
+      continue;
 
-  // if /Names is now empty, remove it too
-  if (names.getKeys().empty())
-    root.removeKey("/Names");
+    if (kept.empty())
+      pageObj.removeKey("/Annots");
+    else
+      pageObj.replaceKey("/Annots", QPDFObjectHandle::newArray(kept));
+  }
 }
 
 // ---------------------------------------------------------------------------