HEIC decoder source provenance - checked 13 October 2026

heic2any 0.0.4 upstream commit: 3428539e643e112323a5b8a2c77c6402cb1372f6
https://github.com/alexcorvi/heic2any/tree/3428539e643e112323a5b8a2c77c6402cb1372f6
The installed dist/heic2any.js is byte-for-byte identical to the file in this upstream source archive. Git blob SHA1: a4d555ef1c80cf3dfe4597cbe07e0eb3fb31ac83; bytes: 1361547.
Embedded memory SHA256: 09c8eb549f8fe1fcdc040c9a740960603331772bf21db50be2f268936c52661d. The memory data is identical to upstream src/libheif.js and contains libheif 1.10.0 and libde265 1.0.2 version strings. The libheif 1.10.0 build script also pins libde265 1.0.2.

heic2any-3428539e643e112323a5b8a2c77c6402cb1372f6-source.zip
Source: https://codeload.github.com/alexcorvi/heic2any/zip/3428539e643e112323a5b8a2c77c6402cb1372f6
Bytes: 5767294
SHA256: e3ce6f63564a471c5192b25f9e397287be6d45fb9c559352d70f33dfc2d8d70b

libheif-1.10.0-source.zip
Source: https://codeload.github.com/strukturag/libheif/zip/refs/tags/v1.10.0
Bytes: 1354048
SHA256: 156880ba503ffe4c57a5b23f5e3fac6e9393251b59d77a65218aa46e1f97827a

libde265-1.0.2-source.zip
Source: https://codeload.github.com/strukturag/libde265/zip/refs/tags/v1.0.2
Bytes: 505070
SHA256: 4d0e09a958670cbec1db95b9b525a439ade558b3962be5231e77ea1a4982c072

The archives contain only public third-party upstream material. No site owner repository, credentials, private profile, image input, or private application source is included.

Original Emscripten SDK/compiler version is not documented. Native recompilation and bit-identical reproduction have not been tested. See build-relink.txt for the supported replacement interface and source build directions; retaining these materials is not a blanket legal certification.