OpenFmt HEIC decoder distribution

heic-to 1.5.2, copyright Hopper Gee, LGPL-3.0.
libheif 1.22.2 and libde265 1.0.16, original copyright holders retained in source archives.
This is the unmodified CSP ES module distributed by heic-to, loaded separately on demand.

Sources distributed alongside this file:
  heic-to-1.5.2-source.tar.gz
  libheif-1.22.2-source.tar.gz
  libde265-1.0.16-source.tar.gz

Rebuild the wrapper:
  Extract heic-to source into a working directory.
  npm install
  node esbuild.mjs
  Use dist/csp/heic-to.js as the replacement module.
The source archive includes src/lib/libheif-without-unsafe-eval.js exactly as shipped upstream.
For rebuilding the native decoder, read heic-to's README.md and libheif's build-emscripten.sh:
  LIBDE265_VERSION=1.0.16 USE_UNSAFE_EVAL=0 USE_WASM=0 ../build-emscripten.sh ..
Supply corresponding libde265 sources from the adjacent archive; retain upstream licenses.

Replace/relink:
  In an OpenBox checkout, replace public/vendor/heic/heic-to.js with a compatible ES module
  exporting heicTo({ blob, type, quality }). Build and serve the site as documented in README.md.
  The module URL is /vendor/heic/heic-to.js; OpenFmt does not inline it into application bundles
  and imposes no integrity lock. Do not run sync-vendor after replacing it, as that copies the
  original package distribution back into place.

You may modify and redistribute these LGPL components subject to their licenses, and perform
reverse engineering necessary to debug modifications to them. This permission is not restricted
by the OpenBox interface or branding. Full notices: /licenses/openfmt-notices.txt.
Upstream: https://github.com/hoppergee/heic-to
https://github.com/strukturag/libheif
https://github.com/strukturag/libde265