HEIC decoding software for the TogetherLens browser portrait cropper

This directory contains the unmodified src/lib/libheif-without-unsafe-eval.js
from the published heic-to 1.5.2 npm package, served with an .mjs extension.
It includes libheif 1.22.2 and its decoder implementation. Copyright notices
in that source are preserved. The package declares LGPL-3.0.

License texts: LGPL-3.0.txt and GPL-3.0.txt in this directory.

Upstream package and corresponding source:
https://www.npmjs.com/package/heic-to/v/1.5.2
https://github.com/hoppergee/heic-to
https://github.com/strukturag/libheif
https://github.com/strukturag/libde265

Package tarball integrity:
sha512-8Fns+lZHAWmz5U5IUxDeXKwIf3foBoKNPLxxFY4B0MkLjNuomEIHCoDbDE+x/llFK3NCEO1cu4+n3iUKY+Svmw==

The cropper loads this same-origin decoder only for a selected HEIC file.
Decoding runs in a separate worker that checks image dimensions before
allocating output pixels. Clear, timeout, completion, and page departure stop
the worker. Source image bytes are not sent to a server. No remote CDN is used.