
Security News
The Nightmare Before Deployment
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.
document-forger
Advanced tools
Document Forger is a Python package that allows you to create a custom-defined number of documents using one document. This package generates as many forged or synthetic documents as the user needs.
Use the package manager pip to install document forger.
pip install document-forger
Or go to our github page and clone this git repository and install the dependencies through the requirements text file provided
pip install -r requirements.txt
The package is built around using the copy-paste technique. The code utilizes OCR to detect and recognize words and their bounding boxes. The code then goes through the words and decides whether or not two characters are swappable. If they are, the code swaps the first character with the second character. This allows us to create minor forgeries that are unrecognizable to the naked eye but still obvious enough to detection software and AIs.
The purpose behind this package is to artificially expand and create a synthetic dataset that can be used to test Forgery Detection AI and to stress test it with different variations.

The above images shows real vs forged generated documents where the red boxes highlight the modifications made to the real document.
This shows the capabilities of our package to work with different sizes, styles and fonts.
Through Scripts:
from document_forger.document_processing import process_document
process_document(input_image, output_directory)
Or through the terminal
python -m document_forger --image_path input_img --ouptut_dir output_dir
To explore the other arguments just run --help at the end.
If you have tesseract installed and added to your local enviorments, than set the path to the exe using the following:
from document_forger.utils import set_tesseract_cmd
set_tesseract_cmd(exe_path)
Or you can use the --tesseract_cmd argument in the terminal.
Pull requests are welcome. Go to our Github Page and for major changes, please open an issue first to discuss what you would like to change.
Please make sure to update tests as appropriate.
FAQs
A package for generating forged documents
We found that document-forger demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.

Research
/Security News
Impostor NuGet package Tracer.Fody.NLog typosquats Tracer.Fody and its author, using homoglyph tricks, and exfiltrates Stratis wallet JSON/passwords to a Russian IP address.

Security News
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.