use github xcffib until hackage is updated