HEIC decoding sources

heic-to 1.6.7 (LGPL-3.0-or-later) is loaded as a separate, lazy browser worker module.
The exact unmodified npm source package, including its source and build script, is heic-to-1.6.7.tgz.
Its embedded CSP decoder was built from libheif 1.23.7 and libde265 1.0.16
with USE_UNSAFE_EVAL=0 (as identified in heic-to/src/lib/libheif-without-unsafe-eval.js).
The corresponding upstream source archives and their SHA-256 digests are provided here.
The application uses the library's public heicTo() interface and does not modify the decoder.
Library source/build instructions: https://github.com/hoppergee/heic-to/tree/v1.6.7
Codec build instructions: libheif-1.23.7/examples/emscripten/
License text: ../heic-to/LICENSE ; codec license texts are in each source archive.
You may replace/rebuild the library using these sources and the published interface.
These source downloads do not contain user work, credentials, names, or documents.