From 8b67885df8873acb77408aed66c829f94c5e9c9e Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Sun, 11 Oct 2026 23:59:45 +0000 Subject: [PATCH] card #12: update ventures/docscope/index.html --- ventures/docscope/index.html | 1220 +++++++++++++++++++++++++++++++++- 1 file changed, 1219 insertions(+), 1 deletion(-) diff --git a/ventures/docscope/index.html b/ventures/docscope/index.html index 311c8dd..2be8028 100644 --- a/ventures/docscope/index.html +++ b/ventures/docscope/index.html @@ -1 +1,1219 @@ -PLACEHOLDER \ No newline at end of file + + + + + +Docscope — see what an Office file still hides + + + + + +
+
+

Time · Venture · Docscope

+
+
+ + Docscope — Office Package Inspector + + + +
+
+

Docscope

+

Drop a .docx, .xlsx or .pptx and see everything still inside it — author names, tracked deletions, thumbnails, comments — dissected on this machine. Nothing is uploaded.

+
+ Get early access + Inspect the sample ↓ +
+

Opens a public GitHub issue. No email, no payment. Nothing is charged today.

+
+
+
+
+ +
+
+
+

The product

+
+
+ + Docscope — waiting for a package + + + +
+ +
+
+ Drag a .docx, .xlsx or .pptx here +

Unzipped locally with DecompressionStream. The page works offline once loaded. The list below is the ZIP central directory, verbatim — nothing is invented.

+ +
+

Loading the preloaded sample through the same unzipper…

+
+
+

Exploded package

+

No parts yet.

+
+
+

Leak report

+

No findings yet.

+
+
+
+

Part inspector

+
+

Click any part in the diagram. Raw XML (or a hex preview of a binary part) appears here, with a plain-English note and a safe-to-send verdict.

+ 
(nothing selected)
+
+
+
+ client-side · no upload + ECMA-376 +
+
+
+
+
+ +
+
+

Reference

+
+
OOXML parts this page actually handles
+
+

Only parts the inspector reads are listed. Each link goes to the ECMA-376 5th edition section that defines it. Parts we do not understand still appear in the diagram, labelled as unhandled.

+ + + + + + + + + + + + + + + + +
PartWhat we readSpec
[Content_Types].xmlDefault and override content types for every partECMA-376 Part 2, §10.1.2
_rels/.rels and *.relsPackage and part relationships, including the thumbnail relationshipECMA-376 Part 2, §9.2 / §10.2
docProps/core.xmldc:creator, cp:lastModifiedBy, title, revision, created, modifiedECMA-376 Part 2, §11.1 (Dublin Core)
docProps/app.xmlApplication, company, template, pages / wordsECMA-376 Part 1, §22.2 extended properties
docProps/thumbnail.jpegEmbedded preview, plus JPEG APP1 EXIF textECMA-376 Part 2, thumbnail relationship
word/document.xmlw:ins / w:del tracked changes, comment markers, visible textECMA-376 Part 1, §17.13 revisions
word/comments.xmlComment author, date, and textECMA-376 Part 1, §17.13.4
word/people.xmlPresence authors and user idsECMA-376 Part 1, §17.13 / MS-OI29500 people part
word/styles.xmlStyle ids and names (annotation only)ECMA-376 Part 1, §17.7
word/media/*Embedded images; JPEG EXIF and PNG tEXt / iTXtECMA-376 Part 1, §15.2.14 images
xl/workbook.xmlSheet names and state="hidden" / veryHiddenECMA-376 Part 1, §18.2 workbook
ppt/presentation.xmlSlides with show="0"ECMA-376 Part 1, §19.2 presentation
+
+
+
+
+ +
+
+

How it works

+
+
+

1

+

Drop the package

+

A .docx, .xlsx or .pptx is a ZIP. The page reads the central directory and inflates each part with the browser's DecompressionStream. Stored and deflate only — the methods Office writes.

+
+
+

2

+

Read the leak report

+

Core properties, tracked insertions and deletions, comments, people.xml, thumbnail parts, JPEG EXIF, PNG text, and hidden sheets or slides are flagged from the XML itself.

+
+
+

3

+

Open any part

+

Click a name in the diagram. You get the raw XML, or a hex preview if the part is binary, plus a plain-English note on what it does and whether it is safe to send.

+
+
+
+
+ +
+
+

Why this exists

+
+
Why this exists — the repos this rides
+
+

People are generating Office files from plain text again. Docscope rides the trending repos wordcraft, gridcraft and deckcraft: builders starring those projects need to see what the package they just wrote actually contains before it is emailed.

+
+
+ storytold/wordcraft + ★ 5,496 stars +

Plain text in, .docx out. Docscope is the check on the other side: creator, last-modified-by, comments and tracked-change remnants in the file that left the tool.

+
+
+ storytold/gridcraft + ★ 2,749 stars +

Spreadsheets from structured text. Hidden sheets (state="hidden") and workbook metadata are exactly what a generated .xlsx can still carry.

+
+
+ storytold/deckcraft + ★ 1,804 stars +

Decks from text. A generated .pptx still has a thumbnail, author names, and slides with show="0" that a client can recover.

+
+
+
+
+
+
+ +
+
+

Pricing

+
+
+

Free

+

$0

+

Anyone checking a file before it leaves their machine.

+
    +
  • Full local dissection of .docx, .xlsx and .pptx
    • +
  • Interactive exploded diagram of every OOXML part
    • +
  • Leak report: authors, tracked insertions and deletions, comments, thumbnails, EXIF, hidden sheets and slides
    • +
  • Raw XML with a plain-English note and a safe-to-send verdict
    • +
  • Works offline once the page has loaded
    • +
+ Inspect a file +
+
+

Pro (founding)

+

$5/mo founding price — nothing charged today

+

The consultant or lawyer who sends client files every week.

+
    +
  • One-click scrub that rewrites the file clean
    • +
  • Batch scanning of whole folders
    • +
  • Exportable leak report (PDF/HTML) for engagement records
    • +
  • Founding price locked for early-access members
    • +
+ Get early access +
+
+

Team/CI (founding)

+

$19/mo per repo — nothing charged today

+

Dev teams and firms that want leaks blocked, not just found.

+
    +
  • Pre-commit hook and CI check that fails on leaky attachments
    • +
  • Shared scrub policies
    • +
  • Everything in Pro for the team
    • +
+ Get early access +
+
+

Nothing is charged today.

+
+
+ +
+
+

Honest limits

+
+
Honest limits — what this page does not do
+
+
    +
  • Does not yet support PDF or DWG files. Office Open XML packages only: .docx, .xlsx, .pptx.
    • +
  • ZIP method 0 (stored) and method 8 (deflate) only — the methods Office writes. Encrypted packages are not decrypted.
    • +
  • EXIF reading covers JPEG APP1 text (ASCII tags such as Artist and DateTime) and PNG tEXt/iTXt. It does not decode every TIFF IFD type.
    • +
  • No one-click scrubbing in the free version. Inspection shows the leak; it does not rewrite the file.
    • +
  • Batch scanning is only in the Pro version. This page takes one file at a time.
    • +
  • CI and pre-commit checks are only in the Team/CI version.
    • +
  • The parsed file list is the ZIP central directory. If a part is missing from that listing, it is missing here too — we do not fill in parts the package does not have.
    • +
+
+
+
+
+
+ + + + + +