HEIC conversion: heic-to 1.5.2, by Hopper Gee, LGPL-3.0-or-later.
Source and build instructions: https://github.com/hoppergee/heic-to
Installed package source: https://www.npmjs.com/package/heic-to/v/1.5.2
Exact package archive: /third-party/heic-to-1.5.2.tgz
Published npm gitHead: f37af866f9aa6212ddc84b67a279c9f2386aba4f
Pinned wrapper source: https://github.com/hoppergee/heic-to/tree/f37af866f9aa6212ddc84b67a279c9f2386aba4f
The archive includes wrapper source and generated decoder JavaScript. It is not a
complete native C/C++ corresponding-source or reproducible-build package.
The library is loaded separately on demand using its CSP build and is unmodified.
License texts: heic-to-LICENSE.txt and GPL-3.0.txt
Runtime inspection of the shipped generated decoder reports libheif 1.22.2 and
libde265 1.0.16, with one registered decoder: libde265 HEVC decoder.
Pinned upstream native notices (unmodified):
  libheif-1.22.2-COPYING.txt
  libde265-1.0.16-COPYING.txt
Their repository commits, source URLs and checksums are in native-notices.json.
These upstream release snapshots do not establish the exact compiler, patches,
or complete corresponding source used to produce the generated decoder.
Commercial distribution must retain the applicable notices and satisfy corresponding
source/relinking requirements. This notice is not a completed distribution review.