# Third-Party Notices

## heic-to 1.5.2

- Purpose: HEIC/HEIF decoding fallback for browsers without a native decoder
- Project and corresponding source:
  https://github.com/hoppergee/heic-to/tree/v1.5.2
- Package: https://www.npmjs.com/package/heic-to/v/1.5.2
- License: GNU Lesser General Public License v3.0 or later (LGPL-3.0)
- npm integrity:
  `sha512-8Fns+lZHAWmz5U5IUxDeXKwIf3foBoKNPLxxFY4B0MkLjNuomEIHCoDbDE+x/llFK3NCEO1cu4+n3iUKY+Svmw==`

Wuups consumes the package through its published `heic-to/csp` entry point.
Wuups does not patch the upstream source. Vite transforms and packages that
published entry point into a separate hashed module that is loaded only when
the browser cannot decode HEIC natively.

The published decoder bundle contains:

- libheif 1.22.2 — corresponding source:
  https://github.com/strukturag/libheif/tree/v1.22.2
- libde265 1.0.16 — corresponding source:
  https://github.com/strukturag/libde265/tree/v1.0.16

Both embedded projects are identified by the published bundle and are licensed
under LGPL-3.0.

The license texts distributed with this application are available at:

- LGPL-3.0:
  `/third-party/heic-to-LGPL-3.0.txt`
- GPL-3.0, incorporated by LGPL-3.0:
  `/third-party/GPL-3.0.txt`

Instructions for rebuilding or replacing the optional decoder module with a
modified interface-compatible version are available at
`/third-party/HEIC_RELINKING.md`.