Immich
HealthyHigh performance self-hosted photo and video management solution.
AI Repo Scan & Security Analysis
Immich is arguably the crown jewel of modern self-hosted media software, offering a 1:1 drop-in replacement for Google Photos and Apple iCloud Photos. With native mobile applications for iOS and Android, Immich delivers instantaneous background camera roll backups, AI facial recognition, object detection, reverse geocoding maps, and shared partner galleries.
The project's engineering discipline is extraordinary. Immich operates under the FUTO software organization, employing dedicated full-time core maintainers. Vulnerabilities are handled with high urgency under coordinated disclosure, and code is screened via automated CodeQL, container vulnerability scanners, and rigorous integration suites. Machine learning pipelines (CLIP, facial recognition) run locally on dedicated sandboxed microservices.
Immich achieves an 8.9 OpenSSF Scorecard. Storage routines are strictly non-destructive: original media files are preserved with exact metadata and checksum integrity. While the project ships rapid releases that necessitate reading breaking change notices, the software has proven remarkably resilient and reliable. Immich receives a glowing Healthy rating at 95/100.
Technical Specifications & Usage Profiles
SEC-01What It's Used ForPRIMARY WORKLOADS
Primary real-world deployment workloads verified for this application architecture:
Google Photos & iCloud Replacement
Auto-syncs full-resolution smartphone photos and RAW assets in background without cloud subscription limits.
On-Device Facial & Object Recognition
Runs local neural networks (CLIP & InsightFace) to identify family members and search by concepts like "sunset on beach".
Partner Sharing & Family Libraries
Granular multi-user access with partner sharing, collaborative albums, and public share links protected by password or expiry.
Geographic Interactive Heatmaps
Extracts EXIF GPS coordinates into an offline Leaflet map showing exactly where every trip was documented.
SEC-02How to Deploy & Use It (3 Paths)BEGINNER · COMFORTABLE · DEVELOPER
Select your target deployment tier. Every snippet is tested for reproducible containerization and zero unverified third-party scripts:
Docker Compose One-Liner
Download the official compose template and start the container stack with default local volume mounts.
curl -fsSL https://raw.githubusercontent.com/immich-app/immich/main/docker/docker-compose.yml -o docker-compose.yml && docker compose up -dCustom HW Acceleration & External Library
Configure Intel QuickSync / NVIDIA NVENC for hardware transcoding and point Immich to your existing NAS photo archive in read-only mode.
docker compose -f docker-compose.yml -f docker-compose.hwaccel.yml up -dBare-Metal Microservices & CLI API Ingest
Deploy the Immich server, microservices, machine-learning server, and PostgreSQL pgvector separately, bulk-ingesting via CLI.
npm install -g @immich/cli && immich upload --key "$IMMICH_API_KEY" --server "https://photos.internal" /mnt/storage/raw-photosSEC-03Hardware & Runtime Requirements4 GB RAM MIN
SEC-04Target Audience & Honest LimitationsPERFECT FOR vs SKIP IT IF
Perfect For
- •Homelabbers with a mini PC (N100, Raspberry Pi 5 8GB, or Intel NUC) looking to leave Google Photos.
- •Families needing private, uncompressed automatic camera roll backups across both iOS and Android.
- •Photographers who demand non-destructive storage where original file hierarchies and RAW files remain intact.
Skip It If
- •You have zero tolerance for reading breaking changelog notes during minor version upgrades.
- •You are running on a 1 GB RAM low-end VPS without swap space.
- •You require instant cloud-based web editing like Adobe Lightroom Web rather than raw digital asset management.
Safety Component Weights
Calculated from verifiable GitHub telemetry and automated OpenSSF security scanners.
Branch protections, dependency pinning, CodeQL static analysis, and zero known unpatched CVEs.
Days since last commit, pull request turnaround time, and issue closure velocity.
Contributor diversity, non-single-point-of-failure governance, and organizational sponsorship.
Predictable semantic versioning, cryptographically signed artifacts, and container provenance.
Risk Assessment & Operational Flags
2 flags- Rapid release cycle requires reading release notes prior to upgrading container versions.
- Heavy machine-learning operations benefit from hardware GPU/NPU allocation.
Can I use this commercially?
Network copyleft. You CAN use this for internal enterprise operations. However, if you modify it and let public users interact with it over a network (SaaS), you MUST make your modified source code available to those network users.
- ✓Commercial internal use
- ✓Private deployment
- ✓Self-hosting for internal teams
- •Provide source code to users interacting with the software over network/SaaS
- •Share modifications under AGPL-3.0
Quick Launch Command
docker compose up -dAlternatives in Photo Management
PhotoPrism
photo-managementPhotoPrism
photoprism/photoprismAI-powered photos app for the decentralized web powered by Go and TensorFlow.
LibrePhotos
photo-managementLibrePhotos
LibrePhotos/librephotosSelf-hosted open-source photo management solution (community fork of Ownphotos).
Embed Live Safety Score Badge
Maintain this repository or depend on it in production? Embed a live 0–100 Safety Score badge in your README. Badges are cached for 24 hours and updated automatically.
[](https://safeopensource.org/tools/immich)