# libvips 8.18.4

A fast image processing library with low memory needs.

Snapshot of gominimal/pkgs commit `02e5f823e4b55b925a4db249e262e7b4f73a96e3` (pushed 2026-07-29T21:20:39.000Z).

## Install

```sh
min add libvips
```

## Direct advisories

None at this commit.

## Transitive advisories

5 advisories inherited through runtime dependencies:

- CVE-2026-40930 (MEDIUM) via libpng
- CVE-2026-5435 (HIGH) via glibc
- CVE-2026-6238 (MEDIUM) via glibc
- GHSA-q7rw-r7qq-2hx6 (UNKNOWN) via glib → pcre2
- OSV-2026-343 (HIGH) via glib → pcre2

## Dependencies

- Build (5): base, toolchain, meson, ninja, pkgconf
- Runtime (8): glib, expat, libjpeg-turbo, libpng, libwebp, lcms2, zlib, glibc

## Scorecard

| Category | Score | Band |
| --- | --- | --- |
| supply-chain | 50 | mid |
| advisories | 25 | low |
| quality | 53 | mid |
| maintenance | 50 | mid |
| licence | 100 | perfect |

## Links

- Homepage: https://libvips.org
- Package page (HTML): https://minimal.dev/pkgs/libvips
- JSON API (floats latest): https://minimal.dev/api/pkgs/libvips.json
- SBOM (CycloneDX 1.5): https://minimal.dev/api/pkgs/libvips/sbom.json