Imgovo - source archives for the LGPL / CDDL components delivered to your browser
=================================================================================
Prepared: 2026-09-30, from the build of Imgovo v6 (package-lock.json, installed packages, build output).
Page with the full list of components and licences: https://imgovo.com/open-source-licenses

These archives are copies of UNMODIFIED upstream source. Imgovo did not change the source of
any of these libraries. Build instructions and open questions are in BUILD-NOTES.txt.
Integrity: SHA256SUMS  (check with:  sha256sum -c SHA256SUMS)

ARCHIVES
--------
LibRaw-0.22.1.tar.gz
    LibRaw 0.22.1 - upstream git tag "0.22.1" (commit b860248a89d9082b8e0a1e202e516f46af9adb29),
    https://github.com/LibRaw/LibRaw . Licence: LGPL-2.1 or CDDL-1.0 (see COPYRIGHT in the archive).
    Linked statically into libraw.wasm (RAW photo decoding).

lcms2-2.19.1.tar.gz
    Little CMS 2.19.1 - upstream git tag "lcms2.19.1" (commit 21c582a594fe5279f90c0b93437c398f93bf62b0),
    https://github.com/mm2/Little-CMS . Licence: MIT. Linked statically into libraw.wasm.
    (MIT does not require source distribution; included because it is needed to rebuild libraw.wasm.)

jpegsrc.v9f.tar.gz
    Independent JPEG Group libjpeg 9f (14-Jan-2024). Same bytes as the archive Emscripten 5.0.7 downloads for
    "-sUSE_LIBJPEG" (SHA-512 7f733d79cf176c690dcf127352f9aa7ec48000455944f286faae606cdeada6f6865b4a3f9f01bda8947b5b1089bb3e52d2b56879b6e871279ec5cbd1829304dc
    = the hash pinned in Emscripten's tools/ports/libjpeg.py). Our copy came from the Ubuntu package
    archive (file libjpeg9_9f.orig.tar.gz, renamed). Licence: IJG licence (see README in the archive).
    Linked statically into libraw.wasm. This software is based in part on the work of the Independent JPEG Group.

libraw-wasm-1.6.0-build-files.tar.gz
    The "work that uses the library": the wrapper source (libraw_wrapper.cpp), JavaScript glue, and the
    build scripts (compileLibraw.sh, makefile, build.js, .github/workflows) of libraw-wasm 1.6.0 -
    upstream git tag v1.6.0 (commit 32fd36a9883a10c1632bc20073f1ea88cc60487a),
    https://github.com/ybouane/LibRaw-Wasm . Declared licence: ISC (package.json); the project publishes no
    licence file and no copyright line. We left out the pre-built binaries that the upstream repository
    commits (libs/*.a, libraw.wasm, libraw.js, dist/) and the sample photo example-sony.ARW.

heic-to-1.5.2.tar.gz
    heic-to 1.5.2 - upstream git commit f37af866f9aa6212ddc84b67a279c9f2386aba4f ("Bump to v1.5.2"),
    https://github.com/hoppergee/heic-to . Licence: LGPL-3.0. Contains the pre-built libheif JavaScript
    modules (src/lib/libheif.js) and the esbuild script that produces dist/heic-to.js.

libheif-1.22.2.tar.gz
    libheif 1.22.2 - upstream git tag "v1.22.2" (commit 763bc8bb87788d64d39ece623ceed988de12dc5b),
    https://github.com/strukturag/libheif . Licence: LGPL-3.0 for the library (MIT for sample programs,
    which are not shipped). Includes build-emscripten.sh.

libde265-1.0.16.tar.gz
    libde265 1.0.16 - upstream git tag "v1.0.16" (commit 7ba65889d3d6d8a0d99b5360b028243ba843be3a),
    https://github.com/strukturag/libde265 . Licence: LGPL-3.0 for the library (MIT for sample programs).

WHAT IS NOT HERE
----------------
- Components under permissive licences (BSD, MIT, Apache-2.0, ISC, 0BSD, Zlib) are in general not licensed
  on the condition that source is offered (we have not had this checked by a lawyer); their notices and
  licence texts are on the licences page, with their exact upstream locations. They are not mirrored here,
  EXCEPT these three, which are included because they are needed to rebuild libraw.wasm:
    - lcms2-2.19.1.tar.gz (Little CMS, MIT)
    - jpegsrc.v9f.tar.gz (IJG libjpeg 9f)
    - libraw-wasm-1.6.0-build-files.tar.gz (wrapper and build scripts; licence only declared as "ISC")
- Imgovo's own website code is not part of these archives.
- We did not rebuild any WebAssembly/JavaScript binary ourselves (see BUILD-NOTES.txt, "Not verified").