============================================================================== PicPrep 1.0.0 — OSS source set: file manifest ============================================================================== Each entry lists the file in this directory, the component it provides, its license, where it comes from, and how its checksum was verified. SHA256SUMS contains the SHA-256 of every file in this directory. ------------------------------------------------------------------------------ libvips-42.dll / libvips-cpp-8.18.7.dll — libvips 8.18.7 and the libraries statically linked into libvips-42.dll ------------------------------------------------------------------------------ sources/libvips-deps/vips-8.18.7.tar.xz Component : libvips 8.18.7 License : LGPL-2.1-or-later Upstream : https://github.com/libvips/libvips/releases/download/v8.18.7/vips-8.18.7.tar.xz SHA-256 : 5baaead3b0bb20ffdb9e9ff09aa9fda08620923df77b63b436654cb5e0b3bf94 Verified : SHA-256 equals $(PKG)_CHECKSUM in libvips/build-win64-mxe v8.18.7 (commit ef19ca09af2453d127453d677c849ccb37cf5694) build/vips.mk sources/libvips-deps/glib-2.90.0.tar.xz Component : GLib 2.90.0 License : LGPL-2.1-or-later Upstream : https://download.gnome.org/sources/glib/2.90/glib-2.90.0.tar.xz SHA-256 : 17d15cac2af80a33271127408e0abc2748eb297c595c2a26409e81e14e7d1b8f Verified : SHA-256 equals $(PKG)_CHECKSUM in kleisauke/mxe commit c36160b231e66e1cbe032ed54aef7617e8b259da src/glib.mk sources/libvips-deps/pango-1.58.2.tar.xz Component : Pango 1.58.2 License : LGPL-2.1-or-later Upstream : https://download.gnome.org/sources/pango/1.58/pango-1.58.2.tar.xz SHA-256 : 342385b6ca3b7c73455d7c80a13b7dbe4489e00bc3bd4c5bd6ed4dce421e374a Verified : SHA-256 equals $(PKG)_CHECKSUM in kleisauke/mxe commit c36160b231e66e1cbe032ed54aef7617e8b259da src/pango.mk sources/libvips-deps/fribidi-1.0.17.tar.xz Component : FriBidi 1.0.17 License : LGPL-2.1-or-later Upstream : https://github.com/fribidi/fribidi/releases/download/v1.0.17/fribidi-1.0.17.tar.xz SHA-256 : 6949dcde27d41cebad1fd741fcafc36d55a1020d2d872d4a6eb3914caabbada2 Verified : SHA-256 equals $(PKG)_CHECKSUM in libvips/build-win64-mxe v8.18.7 (commit ef19ca09af2453d127453d677c849ccb37cf5694) build/overrides.mk sources/libvips-deps/libexif-0.6.26.tar.xz Component : libexif 0.6.26 License : LGPL-2.1-or-later Upstream : https://github.com/libexif/libexif/releases/download/v0.6.26/libexif-0.6.26.tar.xz SHA-256 : 4a055ed6575e61ca46c3172be3c753cc16c9becd0f99ec71d58dd0e471476c0c Verified : SHA-256 equals $(PKG)_CHECKSUM in libvips/build-win64-mxe v8.18.7 (commit ef19ca09af2453d127453d677c849ccb37cf5694) build/overrides.mk sources/libvips-deps/librsvg-2.63.2.tar.xz Component : librsvg 2.63.2 License : LGPL-2.1-or-later Upstream : https://download.gnome.org/sources/librsvg/2.63/librsvg-2.63.2.tar.xz SHA-256 : 852b18e1a00b8605528825a27dc7748bff2a5dd254028f59dc22a34ea57e81b6 Verified : SHA-256 equals $(PKG)_CHECKSUM in libvips/build-win64-mxe v8.18.7 (commit ef19ca09af2453d127453d677c849ccb37cf5694) build/overrides.mk sources/libvips-deps/proxy-libintl-0.5.tar.gz Component : proxy-libintl 0.5 License : LGPL-2.1-or-later Upstream : https://github.com/frida/proxy-libintl/archive/0.5.tar.gz SHA-256 : f7a1cbd7579baaf575c66f9d99fb6295e9b0684a28b095967cfda17857595303 Verified : SHA-256 equals $(PKG)_CHECKSUM in libvips/build-win64-mxe v8.18.7 (commit ef19ca09af2453d127453d677c849ccb37cf5694) build/plugins/proxy-libintl/proxy-libintl.mk sources/libvips-deps/libheif-1.23.5.tar.gz Component : libheif 1.23.5 License : LGPL-3.0-or-later Upstream : https://github.com/strukturag/libheif/releases/download/v1.23.5/libheif-1.23.5.tar.gz SHA-256 : fd9036064c4432f0550d15072ddf34956a248279ee9aeaff0fba3fa0f77d8f1a Verified : SHA-256 equals $(PKG)_CHECKSUM in libvips/build-win64-mxe v8.18.7 (commit ef19ca09af2453d127453d677c849ccb37cf5694) build/libheif.mk sources/libvips-deps/cairo-1.18.6.tar.xz Component : cairo 1.18.6 License : MPL-1.1 (LGPL-2.1 / MPL-1.1 dual) Upstream : https://cairographics.org/releases/cairo-1.18.6.tar.xz SHA-256 : 1c767308174337a74694da0f3ec069c271452163a1ef4540964c50c301f157d4 Verified : SHA-256 equals $(PKG)_CHECKSUM in libvips/build-win64-mxe v8.18.7 (commit ef19ca09af2453d127453d677c849ccb37cf5694) build/overrides.mk; also equals the published cairo-1.18.6.tar.xz.sha256sum sources/libvips-deps/libaom-3.15.1.tar.gz Component : aom 3.15.1 License : BSD-2-Clause + AOM Patent License 1.0 Upstream : https://storage.googleapis.com/aom-releases/libaom-3.15.1.tar.gz SHA-256 : 8ca0c52746174603500f0adb6f2a215d69c9ca2aab2acb3caa06fb791d8d01bf Verified : SHA-256 equals $(PKG)_CHECKSUM in libvips/build-win64-mxe v8.18.7 (commit ef19ca09af2453d127453d677c849ccb37cf5694) build/aom.mk sources/libvips-deps/libarchive-3.8.9.tar.xz Component : libarchive 3.8.9 License : BSD-2-Clause Upstream : https://github.com/libarchive/libarchive/releases/download/v3.8.9/libarchive-3.8.9.tar.xz SHA-256 : 888c934f9d95648ecb9163dc8e23ab80a476ecb81a8f1154704a227b5b676dde Verified : SHA-256 equals $(PKG)_CHECKSUM in kleisauke/mxe commit c36160b231e66e1cbe032ed54aef7617e8b259da src/libarchive.mk; the recipe downloads from www.libarchive.org; this GitHub release file is byte-identical sources/libvips-deps/cgif-0.5.4.tar.gz Component : cgif 0.5.4 License : MIT Upstream : https://github.com/dloebl/cgif/archive/v0.5.4.tar.gz SHA-256 : 83a70a15bc2da41f081a44ebc58ee48e2e1d524a6d3fdb4a24064afa08d5ad4d Verified : SHA-256 equals $(PKG)_CHECKSUM in libvips/build-win64-mxe v8.18.7 (commit ef19ca09af2453d127453d677c849ccb37cf5694) build/cgif.mk sources/libvips-deps/expat-2.8.5.tar.bz2 Component : Expat 2.8.5 License : MIT Upstream : https://github.com/libexpat/libexpat/releases/download/R_2_8_5/expat-2.8.5.tar.bz2 SHA-256 : 952c03c33a6b337f12dae7a9b0f9dee86f867550d35c994d6bdaaddd37dc8454 Verified : SHA-256 equals $(PKG)_CHECKSUM in kleisauke/mxe commit c36160b231e66e1cbe032ed54aef7617e8b259da src/expat.mk; the recipe downloads from SourceForge; this GitHub release file is byte-identical sources/libvips-deps/libffi-3.8.0.tar.gz Component : libffi 3.8.0 License : MIT Upstream : https://github.com/libffi/libffi/releases/download/v3.8.0/libffi-3.8.0.tar.gz SHA-256 : 7da3e2d9a171eb0a038f592ecad3ff2bb2550f3496d87b3b29ad0cf4430c0db4 Verified : SHA-256 equals $(PKG)_CHECKSUM in libvips/build-win64-mxe v8.18.7 (commit ef19ca09af2453d127453d677c849ccb37cf5694) build/overrides.mk sources/libvips-deps/fontconfig-2.18.3.tar.bz2 Component : fontconfig 2.18.3 License : fontconfig License (MIT-style) Upstream : https://gitlab.freedesktop.org/fontconfig/fontconfig/-/archive/2.18.3/fontconfig-2.18.3.tar.bz2 SHA-256 : 8d28f79d2017cbe1fbb7da84b2502c86421b4f45860234d2f4ab5b35564c8d01 Verified : SHA-256 equals $(PKG)_CHECKSUM in kleisauke/mxe commit c36160b231e66e1cbe032ed54aef7617e8b259da src/fontconfig.mk sources/libvips-deps/freetype-2.14.3.tar.xz Component : FreeType 2.14.3 License : FTL Upstream : https://downloads.sourceforge.net/project/freetype/freetype2/2.14.3/freetype-2.14.3.tar.xz SHA-256 : 36bc4f1cc413335368ee656c42afca65c5a3987e8768cc28cf11ba775e785a5f Verified : SHA-256 equals $(PKG)_CHECKSUM in kleisauke/mxe commit c36160b231e66e1cbe032ed54aef7617e8b259da src/freetype.mk sources/libvips-deps/harfbuzz-14.5.0.tar.xz Component : HarfBuzz 14.5.0 License : MIT Upstream : https://github.com/harfbuzz/harfbuzz/releases/download/14.5.0/harfbuzz-14.5.0.tar.xz SHA-256 : b7132e148358a45185c9feafd049dbaf243649d3c44414b3534d9c95d18592b9 Verified : SHA-256 equals $(PKG)_CHECKSUM in kleisauke/mxe commit c36160b231e66e1cbe032ed54aef7617e8b259da src/harfbuzz.mk sources/libvips-deps/highway-1.4.0.tar.gz Component : Highway 1.4.0 License : Apache-2.0 OR BSD-3-Clause Upstream : https://github.com/google/highway/releases/download/1.4.0/highway-1.4.0.tar.gz SHA-256 : 36f672ab48ddb3c8555e9e89e16fe400cd7d16c6eb455a1a3d0c146a63ababdc Verified : SHA-256 equals $(PKG)_CHECKSUM in libvips/build-win64-mxe v8.18.7 (commit ef19ca09af2453d127453d677c849ccb37cf5694) build/highway.mk sources/libvips-deps/libimagequant-2.4.1.tar.gz Component : libimagequant 2.4.1 (lovell fork) License : BSD-2-Clause Upstream : https://github.com/lovell/libimagequant/archive/v2.4.1.tar.gz SHA-256 : 47d2a84b7b1052975c9d50a3d4e3cacbf57b43d84a4c3131210848ead9964dfb Verified : SHA-256 equals $(PKG)_CHECKSUM in libvips/build-win64-mxe v8.18.7 (commit ef19ca09af2453d127453d677c849ccb37cf5694) build/libimagequant.mk sources/libvips-deps/lcms2-2.19.1.tar.gz Component : Little CMS 2.19.1 License : MIT Upstream : https://github.com/mm2/Little-CMS/releases/download/lcms2.19.1/lcms2-2.19.1.tar.gz SHA-256 : bfc54f7bab59fbc921012014a8032e4cba4abd46db47d46b76416a8c0b2815c8 Verified : SHA-256 equals $(PKG)_CHECKSUM in kleisauke/mxe commit c36160b231e66e1cbe032ed54aef7617e8b259da src/lcms.mk; the recipe downloads from SourceForge; this GitHub release file is byte-identical sources/libvips-deps/mozjpeg-0826579.tar.gz Component : mozjpeg 0826579 License : IJG AND BSD-3-Clause AND Zlib Upstream : https://github.com/mozilla/mozjpeg/tarball/0826579/mozjpeg-0826579.tar.gz Commit : 08265790774cd0714832c9e675522acbe5581437 SHA-256 : 375d19302f09dfa267651dcfd3ddb62862ab3a488862b6168ce755bb1a925860 Verified : SHA-256 equals $(PKG)_CHECKSUM in libvips/build-win64-mxe v8.18.7 (commit ef19ca09af2453d127453d677c849ccb37cf5694) build/plugins/mozjpeg/mozjpeg.mk sources/libvips-deps/pixman-0.46.4.tar.gz Component : pixman 0.46.4 License : MIT Upstream : https://cairographics.org/releases/pixman-0.46.4.tar.gz SHA-256 : d09c44ebc3bd5bee7021c79f922fe8fb2fb57f7320f55e97ff9914d2346a591c Verified : SHA-256 equals $(PKG)_CHECKSUM in kleisauke/mxe commit c36160b231e66e1cbe032ed54aef7617e8b259da src/pixman.mk sources/libvips-deps/libpng-1.6.58.tar.xz Component : libpng 1.6.58 License : libpng-2.0 Upstream : https://downloads.sourceforge.net/project/libpng/libpng16/1.6.58/libpng-1.6.58.tar.xz SHA-256 : 28eb403f51f0f7405249132cecfe82ea5c0ef97f1b32c5a65828814ae0d34775 Verified : SHA-256 equals $(PKG)_CHECKSUM in kleisauke/mxe commit c36160b231e66e1cbe032ed54aef7617e8b259da src/libpng.mk sources/libvips-deps/tiff-4.7.2.tar.xz Component : LibTIFF 4.7.2 License : libtiff License Upstream : https://download.osgeo.org/libtiff/tiff-4.7.2.tar.xz SHA-256 : 4996f0c4f93094719b1ca5c6279b20e588773ba8a247533e486416fb662ddb88 Verified : SHA-256 equals $(PKG)_CHECKSUM in kleisauke/mxe commit c36160b231e66e1cbe032ed54aef7617e8b259da src/tiff.mk sources/libvips-deps/uhdr-2.0.2.tar.gz Component : libultrahdr 2.0.2 License : MIT AND Apache-2.0 Upstream : https://github.com/google/libultrahdr/archive/v2.0.2.tar.gz SHA-256 : aa8d193bb887c348c419780511dd03b374f4e07af8812b6d3f80c8537cf1ef2c Verified : SHA-256 equals $(PKG)_CHECKSUM in libvips/build-win64-mxe v8.18.7 (commit ef19ca09af2453d127453d677c849ccb37cf5694) build/uhdr.mk sources/libvips-deps/libwebp-1.6.0.tar.gz Component : libwebp 1.6.0 License : BSD-3-Clause + WebP PATENTS Upstream : https://storage.googleapis.com/downloads.webmproject.org/releases/webp/libwebp-1.6.0.tar.gz SHA-256 : e4ab7009bf0629fd11982d4c2aa83964cf244cffba7347ecd39019a9e38c4564 Verified : SHA-256 equals $(PKG)_CHECKSUM in kleisauke/mxe commit c36160b231e66e1cbe032ed54aef7617e8b259da src/libwebp.mk sources/libvips-deps/libxml2-2.15.4.tar.xz Component : libxml2 2.15.4 License : MIT Upstream : https://download.gnome.org/sources/libxml2/2.15/libxml2-2.15.4.tar.xz SHA-256 : 98087fd181d9070724f3fbc65c7377db03038eb92bd882374daff44940138821 Verified : SHA-256 equals $(PKG)_CHECKSUM in kleisauke/mxe commit c36160b231e66e1cbe032ed54aef7617e8b259da src/libxml2.mk; the recipe URL uses the directory /2.14/; the file is identified by its checksum sources/libvips-deps/zlib-ng-2.3.3.tar.gz Component : zlib-ng 2.3.3 License : Zlib Upstream : https://github.com/zlib-ng/zlib-ng/archive/2.3.3.tar.gz SHA-256 : f9c65aa9c852eb8255b636fd9f07ce1c406f061ec19a2e7d508b318ca0c907d1 Verified : SHA-256 equals $(PKG)_CHECKSUM in libvips/build-win64-mxe v8.18.7 (commit ef19ca09af2453d127453d677c849ccb37cf5694) build/plugins/zlib-ng/zlib-ng.mk ------------------------------------------------------------------------------ Rust crates compiled into libvips-42.dll as part of librsvg 2.63.2 ------------------------------------------------------------------------------ sources/librsvg-crates/librsvg-2.63.2-Cargo.lock Component : librsvg 2.63.2 Cargo.lock License : (lock file) Upstream : https://github.com/GNOME/librsvg/blob/2.63.2/Cargo.lock SHA-256 : e79e2a2735a0b5b151bb4133becd3008223fabedd34a8b787a872edab9854941 Verified : copied from tag 2.63.2 of GNOME's librsvg mirror; compared with Cargo.lock inside librsvg-2.63.2.tar.xz by tools/finalize_oss.py sources/librsvg-crates/librsvg-2.63.2-crates.tar Component : 357 crates.io packages locked by librsvg 2.63.2 Cargo.lock (tar of .crate files) License : per crate (MIT / Apache-2.0 / others, see each crate) Upstream : https://static.crates.io/crates//-.crate SHA-256 : 52d52b186efd34c6ce9d0ecd5c5b476b8bb0ab0f9e68efc9b41e6193de68bdc1 Verified : every .crate verified against the checksum recorded in Cargo.lock; per-crate SHA-256 in librsvg-2.63.2-crates.sha256 sources/librsvg-crates/librsvg-2.63.2-crates.sha256 Component : per-crate SHA-256 list for librsvg-2.63.2-crates.tar License : - Upstream : - SHA-256 : ee96833a58e887e6ac000bf8a79dfa92cbf53bd4ba4ef91fc5abeaff66f760c2 Verified : generated from the verified .crate files ------------------------------------------------------------------------------ Build material for libvips-42.dll and libvips-cpp-8.18.7.dll ------------------------------------------------------------------------------ sources/build-material/build-win64-mxe-v8.18.7-ef19ca09af2453d127453d677c849ccb37cf5694.tar.gz Component : libvips/build-win64-mxe v8.18.7 (build scripts, package overrides, patches) License : MIT Upstream : https://github.com/libvips/build-win64-mxe/tree/v8.18.7 Commit : ef19ca09af2453d127453d677c849ccb37cf5694 SHA-256 : f52864572e6df6e549016369fdb2705aa195a837bd7bc8c52e45f42b59ef97a7 Verified : GitHub archive of the commit tagged v8.18.7 sources/build-material/kleisauke-mxe-llvm-mingw-20260924-c36160b231e66e1cbe032ed54aef7617e8b259da.tar.gz Component : kleisauke/mxe, branch llvm-mingw-20260924 (MXE package recipes and patches) License : MIT (MXE); recipes/patches of each package Upstream : https://github.com/kleisauke/mxe/tree/llvm-mingw-20260924 Commit : c36160b231e66e1cbe032ed54aef7617e8b259da SHA-256 : b71d435d977b64f56b048c948a7649892fc36a1977ecd30ca0e7fe3c21b2f607 Verified : GitHub archive of the branch head commit; the build records only the branch name sources/build-material/sharp-libvips-v1.3.4-ebb95f8add54eee8bed840e3fb587e4cbec857d7.tar.gz Component : sharp-libvips v1.3.4 (build/win.sh repackages the build-win64-mxe binary) License : Apache-2.0 Upstream : https://github.com/lovell/sharp-libvips/tree/v1.3.4 Commit : ebb95f8add54eee8bed840e3fb587e4cbec857d7 SHA-256 : 65fdb633c2d97626352a3771b7a0ce30b6a89af03d2a1238491c8b068e6b8dad Verified : GitHub archive of the commit tagged v1.3.4 sources/build-material/sharp-v0.35.5-51a990faa26ade5586a4934ac9673c98d8893326.tar.gz Component : sharp 0.35.5 (src/binding.gyp builds libvips-cpp-8.18.7.dll) License : Apache-2.0 Upstream : https://github.com/lovell/sharp/tree/v0.35.5 Commit : 51a990faa26ade5586a4934ac9673c98d8893326 SHA-256 : d600bcbdd550ea096a384391a474907e6aa8138f97ea472bf5228b07ae75f779 Verified : GitHub archive of the commit tagged v0.35.5 sources/build-material/img-sharp-libvips-dev-1.3.4.tgz Component : @img/sharp-libvips-dev 1.3.4 (libvips C++ binding sources compiled into libvips-cpp-8.18.7.dll) License : LGPL-3.0-or-later Upstream : https://registry.npmjs.org/@img/sharp-libvips-dev/-/sharp-libvips-dev-1.3.4.tgz SHA-256 : e9dd5562c219d44cab7ce811906773a1354b583ed4bfa5115e1cdc954a0290aa Verified : matches the npm registry integrity (sha512) of the package; its cplusplus/ files are identical to libvips v8.18.7 sources/build-material/mingw-w64-mingw-w64-57b5950.tar.gz Component : mingw-w64 at commit 57b5950 (MinGW-w64 runtime statically linked into libvips-42.dll) License : ZPL-2.1 and the other licenses in COPYING.MinGW-w64-runtime.txt Upstream : https://github.com/mingw-w64/mingw-w64/tarball/57b5950/mingw-w64-mingw-w64-57b5950.tar.gz Commit : 57b595039040eaa15bece85b7cc71d952281b269 SHA-256 : 7362a2dc2d289dde4617e21e5d7a006c87c19e80793c8928a794b654ed6e2bcd Verified : SHA-256 equals $(PKG)_CHECKSUM in kleisauke/mxe commit c36160b231e66e1cbe032ed54aef7617e8b259da plugins/llvm-mingw/overrides.mk ------------------------------------------------------------------------------ ffmpeg.dll — Electron 44.5.1 official codec-free FFmpeg ------------------------------------------------------------------------------ sources/ffmpeg/chromium-ffmpeg-2b68d2babae73714846961fb0ee47e3b3d2e39a9.tar.gz Component : Chromium third_party/ffmpeg at revision 2b68d2b (source of the codec-free ffmpeg.dll, incl. Chromium build files) License : LGPL-2.1-or-later Upstream : https://chromium.googlesource.com/chromium/third_party/ffmpeg/+/2b68d2babae73714846961fb0ee47e3b3d2e39a9 Commit : 2b68d2babae73714846961fb0ee47e3b3d2e39a9 SHA-256 : see SHA256SUMS Verified : revision pinned by DEPS of Chromium 152.0.7977.130; archive created with "git archive" from that commit (no upstream checksum exists for this archive) sources/ffmpeg/electron-v44.5.1-19c601167d4ae75989938416c18ed81eb21c6020.tar.gz Component : Electron 44.5.1 source (build/args/ffmpeg.gn, patches/ffmpeg, electron_ffmpeg_zip target) License : MIT Upstream : https://github.com/electron/electron/tree/v44.5.1 Commit : 19c601167d4ae75989938416c18ed81eb21c6020 SHA-256 : 6f7bc85ff223f0573155e1687b265d892e650e60751fa131eb9850348ee18d03 Verified : GitHub archive of the commit tagged v44.5.1 ------------------------------------------------------------------------------ StdUtils.dll — StdUtils plug-in for NSIS 1.14 (setup program / uninstaller) ------------------------------------------------------------------------------ sources/nsis-plugins/StdUtils.2018-10-27.sources.tbz2 Component : StdUtils 1.14 source (StdUtils.dll) License : LGPL-2.1-or-later (with the author's clarification) Upstream : https://github.com/lordmulder/stdutils/releases/download/1.14/StdUtils.2018-10-27.sources.tbz2 SHA-256 : c5e3b1a66219bc9564c2ccc1702691327eecf044ad33404ac268d725d22dca49 Verified : official release asset of StdUtils 1.14 (206,896 bytes as listed by the release) sources/nsis-plugins/StdUtils.2018-10-27.sources.tbz2.sig2 Component : signature file published with the StdUtils 1.14 source release License : - Upstream : https://github.com/lordmulder/stdutils/releases/download/1.14/StdUtils.2018-10-27.sources.tbz2.sig2 SHA-256 : e9682143e0d9bc9ec77f96d47a3a4cc6f7cec045b909c5369c4da4384427fba5 Verified : official release asset ------------------------------------------------------------------------------ nsis7z.dll — 7-Zip NSIS plug-in 19.00 (setup program) ------------------------------------------------------------------------------ sources/nsis-plugins/Nsis7z_19.00.7z Component : nsis7z 19.00 (plug-in sources and binaries; nsis7z.dll) License : GNU LGPL as stated by the author; LZMA SDK parts public domain Upstream : https://nsis.sourceforge.io/Nsis7z_plug-in SHA-256 : 6f2f3730049926f40442ee0c8b7d3e3dee7ace544d82467ff8059ea3f4201c58 Verified : official archive from the NSIS wiki; its Plugins/x86-unicode/nsis7z.dll is byte-identical to the DLL in the PicPrep installer sources/nsis-plugins/lzma1900.7z Component : LZMA SDK 19.00 (required to build nsis7z 19.00) License : public domain Upstream : https://www.7-zip.org/a/lzma1900.7z SHA-256 : see SHA256SUMS SHA-512 : 60532483249d86960d5c481dc88ebeafabb7e435afb6188bc26f38177b8534ef3da83317d6920d99103d4f10a8dcdb624489ea5ddad8e0c8732bab1bb4ebd7eb Size : 1,082,692 bytes Verified : size 1,082,692 bytes and SHA-512 as recorded for lzma1900.7z by Gentoo (app-arch/lzma Manifest) ------------------------------------------------------------------------------ Reference only (not included in this directory) ------------------------------------------------------------------------------ LLVM 23.1.2 source: libc++, libc++abi, libunwind and compiler-rt builtins are statically linked into libvips-42.dll; Apache-2.0 WITH LLVM-exception (no source-provision obligation) Upstream : https://github.com/llvm/llvm-project/releases/download/llvmorg-23.1.2/llvm-project-23.1.2.src.tar.xz SHA-256 c98bbef08a2b4c2613cd50e9aa9ae7b69b1fe6c16b2c40373bc0ab6116fdf78a (from kleisauke/mxe src/llvm.mk) Microsoft C++ Standard Library (statically linked into libvips-cpp-8.18.7.dll by the MSVC 14.44 / Visual Studio 2022 17.14 toolset); Apache-2.0 WITH LLVM-exception (no source-provision obligation) Upstream : https://github.com/microsoft/STL/tree/vs-2022-17.14 tag vs-2022-17.14 Rust toolchain / standard library source (nightly 2026-09-24): compiled into libvips-42.dll via -Zbuild-std; MIT / Apache-2.0 (no source-provision obligation) Upstream : https://static.rust-lang.org/dist/2026-09-24/rustc-nightly-src.tar.xz SHA-256 f2c139528ba025f1141935df4f634e18db614b9b3b1cf2ea59e3675a6ade89f3 (from kleisauke/mxe plugins/llvm-mingw/rust.mk) Chromium 152.0.7977.130 (full Chromium source tree and build system used by Electron to build ffmpeg.dll) Upstream : https://chromium.googlesource.com/chromium/src/+/refs/tags/152.0.7977.130 commit 2c592105bbcd9490a9894df48d0fe59b2c512651