HEIC/HEIF fallback decoder - third-party notice
================================================

This site distributes an optional, same-origin WebAssembly decoder used only
when the visitor's browser cannot decode an HEIC/HEIF image natively.

Components
----------

* Application wrapper derived from discourse/jSquash, Apache-2.0.
* libheif 1.23.2, LGPL-3.0-or-later.
  Upstream commit: ac1cb05c39008f01525c991ff8b88f84ddf70fd2
  Official source archive: libheif-1.23.2.tar.gz
  SHA-256: 8bd5d41d19dc84536d118b04774709f244df6104ef66d623dad5fa4650143405
* libde265 1.1.1, LGPL-3.0-or-later.
  Upstream commit: 4dd701fffac01632ffd5cabc5ef10deb56accba1
  Official source archive: libde265-1.1.1.tar.gz
  SHA-256: fd48a927e94ed74fc7ce8829d222b9d8599fcbfe8b6448ba66705babc56ab219
* Emscripten 6.0.8 runtime, MIT and University of Illinois/NCSA licenses.
* LLVM runtime components, Apache-2.0 WITH LLVM-exception.

Corresponding source and replacement
------------------------------------

This directory includes the exact upstream source archives, license texts,
the adapted heic_dec.cpp wrapper, pre.js, Makefile and BUILDING.md used for the
distributed module. The Makefile verifies source hashes and builds a drop-in
heic_dec.js/heic_dec.wasm pair. Rebuilding the site replaces the module loaded
by the application; no contractual restriction is imposed on modification or
reverse engineering for debugging those modifications.

`ARTIFACTS.sha256` records the checked-in pre-bundle decoder, application-side
corresponding source and official source-archive hashes.

The software is provided without warranty. HEVC patent licensing obligations,
if any, depend on the distribution jurisdiction and are separate from these
open-source copyright licenses.