# HEIC decoder source and license

ConvertExpress loads `package/dist/next/heic-to.js` only after the user starts a HEIC conversion. It is the unmodified `heic-to` 1.6.6 distribution, licensed LGPL-3.0. The package license is in `package/LICENSE`; its README and exact npm source package are available in [heic-to-1.6.6-source.tgz](heic-to-1.6.6-source.tgz) (SHA-256: `6dc4703e62048c372ebef9632ce8613d53598ceaccf0d891fbe0a533909cf1a5`).

Upstream source and build instructions: https://github.com/hoppergee/heic-to/tree/v1.6.6 . The upstream README states that this release uses libheif 1.23.6 and builds with libde265 1.0.16. Those components are also LGPL libraries; their exact source versions are at https://github.com/strukturag/libheif/tree/v1.23.6 and https://github.com/strukturag/libde265/tree/v1.0.16 . The shipped HEIC decoder is a separate browser asset; ConvertExpress application code is not copied into it. Users can serve a modified compatible decoder at the same path when running their own copy of the site.

This notice covers copyright licensing. HEVC patent questions depend on distribution and jurisdiction and should be reviewed separately before a commercial launch of this feature.