HEIC photo decoding - open-source notices

This application uses an unmodified, separately loaded libheif JavaScript library
from heic-to 1.6.7. The library includes libheif 1.23.7 and libde265 1.0.16.
It runs on your device to decode HEIC/HEIF photos. The application loads the
library at runtime from a separate local vendor URL; it is not bundled into
private application code. This library and its use are covered by the GNU
Lesser General Public License version 3 (LGPL-3.0), with the additional
permissions of that license relative to GNU GPL version 3.

libheif: Copyright Dirk Farin and contributors; exact years and notices are in source.
libde265: Copyright struktur AG, Dirk Farin and contributors; exact years and notices are in source.
heic-to: Copyright its contributors, maintained by Hopper Gee.
All original notices remain in the accompanying source archives and licenses.
The library is provided without warranty, including without implied warranty
of merchantability or fitness for a particular purpose.

Full license texts: licenses/LGPL-3.0.txt and licenses/GPL-3.0.txt.
Original component notices: licenses/HEIC-TO-LICENSE.txt,
licenses/LIBHEIF-COPYING.txt and licenses/LIBDE265-COPYING.txt.
Emscripten runtime notices: licenses/EMSCRIPTEN-LICENSE.txt.

Corresponding source, wrappers, and build scripts are available in the source
archives in sources/. The exact npm distribution and pinned heic-to repository
archive are included beside the libheif and libde265 release source archives.
PROVENANCE.json contains the source URLs, versions, integrity and SHA-256 hashes.
UPSTREAM-README.md and build-emscripten.upstream.sh preserve build instructions.

You may modify or replace this separately loaded library with an interface-
compatible version. No integrity check, application restriction, or license
term is imposed by this application to prevent library modification or reverse
engineering for debugging those modifications. To use a modified version,
replace libheif-without-unsafe-eval.js at the same vendor path while preserving
its default factory export and HeifDecoder/HeifImage public interface; browser
local overrides can also replace this response for local execution.

The application code and the surrounding site are not offered under GPL merely
by this notice; the terms above concern the separately distributed library.
No x265, x264, libaom or dav1d codec is linked in this build. Inspection of the
exact library reports a working HEVC decoder and no HEVC encoder. The upstream
build script links libde265; AOM is disabled by default. The generic JPEG file
signature checker and mask encoder present in libheif are not external codecs.

Upstream publishes source and build instructions but does not identify the
Emscripten version used for this artifact. The included materials preserve that
upstream limitation; they do not claim a byte-identical reproducible rebuild.