logologo
  • How it works
  • Why It Matters
  • Statistics
  • Pricing
  • FAQ
  • API
logologo
  • How it works
  • Why It Matters
  • Statistics
  • Pricing
  • FAQ
  • API
HTPBE?

Structural PDF tamper detection API. Catches edits your KYC stack misses.

Product

  • How It Works
  • Why It Matters
  • Use Cases
  • Pricing

Developers

  • API Reference
  • GitHub/docs
  • Changelogv2.37.1

Resources

  • About
  • Blog
  • Comparisons
  • Legal & Imprint

© 2024–2026 TMI Iurii Rogulia · VAT ID: FI29845875 · Made in Finland 🇫🇮

Status

Algorithm v2.37.1

Tool profile

pdf-lib

pdf-lib reads as a downstream re-saver — it surfaces disproportionately on documents whose original Creator was a different, often institutional, application.

Back to all statistics
Forensic verdict

Anomaly profile

Based on this tool’s share of the HTPBE? corpus.

Modification rate
88%+40pp above baseline
Corpus baseline: 48%
Corpus share
0.41%
Share of all analyzed appearances
Modification rate
88%
+40pp above baseline
Role split
48%C/52%P
Creator vs Producer share of appearances

Corpus profile

How pdf-lib shows up in HTPBE? corpus

pdf-lib is a JavaScript/TypeScript library for creating and modifying PDFs in Node.js and the browser. Common in SaaS form-fill products and bespoke document tools.

pdf-lib appears both as the original generator on JS-stack SaaS output and as a downstream re-saver on documents that originated elsewhere. Signal: when pdf-lib is the latest Producer on a document whose Creator was an institutional source, that producer/creator mismatch is one of the markers we surface.

The signal
pdf-lib appears both as the original generator on JS-stack SaaS output and as a downstream re-saver on documents that originated elsewhere.

Role in the workflow

How pdf-lib shows up in metadata

Every PDF carries a Creator (the application that produced the original document) and a Producer (the engine that wrote the PDF). The same tool can appear in either slot, with very different modification profiles.

CAs Creator · 48%
As Producer · 52%P
CAs Creator
  • Share of appearances
    48%
  • Modification rate
    89%
  • Avg file size
    335 KB
PAs Producer
  • Share of appearances
    52%
  • Modification rate
    88%
  • Avg file size
    397 KB

How to read this

The Creator slot typically reflects where a document started life. The Producer slot reflects whatever wrote the bytes — and is the field that gets overwritten when a PDF is opened, edited, and saved by a downstream tool.

A higher modification rate as Producer than as Creator usually means the tool is acting as a re-saver on documents that originated elsewhere. A higher rate as Creator points to fragile workflows around the original authoring app.

Distributions

What ships alongside pdf-lib

The PDF versions pdf-lib writes when acting as Producer, and the other tools that appear in the same documents.

PDF versions written

Most output is PDF 1.7 (100% of files where pdf-lib is the Producer).

PDF 1.7100.0%

Common Creators when pdf-lib is the Producer

pdf-lib sits upstream in 81% of cases — read this row as “what kinds of documents end up routed through pdf-lib.”

pdf-lib81.3%
Adobe Photoshop4.2%
Acrobat PDFMaker2.1%
ADP2.1%
VCTransaction2.1%
PDFium2.1%
Microsoft Word2.1%
EngageOne Generate 6.6.11.40722.1%
Google Sheets2.1%

Related profiles

Tools you’ll see next to pdf-lib

Other tools that frequently share metadata with pdf-lib in the same documents. Each card links to its own forensic profile.

P4% co-occurrence
HTPBE
Corpus share0.04%
Mod rate50%
C2% co-occurrence
Adobe Photoshop
Corpus share0.27%
Mod rate75%
C1% co-occurrence
Acrobat PDFMaker
Corpus share0.21%
Mod rate69%
C1% co-occurrence
ADP
Corpus share0.6%
Mod rate99%
C1% co-occurrence
VCTransaction
Corpus share0.15%
Mod rate65%

Long tail

Notable observations

Smaller cuts of the pdf-lib corpus — useful context, but treat each row as a single data point rather than a strong signal.

Embedded files
1%

Of files have attachments inside

Avg pages per document
6.7
Oldest observed
16.09.2022 — almost 4 years ago

Secure your workflow

Create your account — API key on signup, free test environment on every plan.
From $15/mo. No sales call. Cancel any time.

Start Free — Close the Structural Fraud GapSee Pricing
Read API Docs →