# libwebp 1.6.0

Mirror only. Please do not send pull requests. See https://chromium.googlesource.com/webm/libwebp/+/HEAD/CONTRIBUTING.md.

Snapshot of gominimal/pkgs commit `cd4b09dd2f492c47fba70eb1b8a8c724dabdc7e9` (pushed 2026-07-10T23:16:55.000Z).

## Install

```sh
min add libwebp
```

## Direct advisories

None at this commit.

## Transitive advisories

6 advisories inherited through runtime dependencies:

- CVE-2026-4046 (HIGH) via glibc
- CVE-2026-4437 (HIGH) via glibc
- CVE-2026-4438 (MEDIUM) via glibc
- CVE-2026-5450 (CRITICAL) via glibc
- CVE-2026-5928 (HIGH) via glibc
- CVE-2026-40930 (MEDIUM) via libpng

## Dependencies

- Build (5): base, cmake, make, pkgconf, toolchain
- Runtime (4): glibc, libjpeg-turbo, libpng, zlib

## Scorecard

| Category | Score | Band |
| --- | --- | --- |
| supply-chain | 80 | good |
| advisories | 10 | low |
| quality | 0 | low |
| maintenance | 50 | mid |
| licence | 100 | perfect |

## Links

- Package page (HTML): https://minimal.dev/pkgs/libwebp
- JSON API (floats latest): https://minimal.dev/api/pkgs/libwebp.json
- SBOM (CycloneDX 1.5): https://minimal.dev/api/pkgs/libwebp/sbom.json