GraphicsMagick bundles a large number of 3rd party libraries. We should unbundle and remove the ones that we can. For the rest, we should try patching their vulnerabilities and leaving code comments explaining the situation in the GraphicsMagick package definition.