FreshConvert codec sources and replacement information

The codec binaries are unmodified upstream builds loaded as separate modules.
No source archive is downloaded automatically during conversion.

Local corresponding-source downloads:
https://freshconvert.com/open-source/libde265-1.0.15-source.tar.gz
https://freshconvert.com/open-source/libheif-1.23.5-source.tar.gz
https://freshconvert.com/open-source/libheif-emscripten-1.23.5-source.tar.gz
https://freshconvert.com/open-source/libheif-js-1.23.5-source.tar.gz
https://freshconvert.com/open-source/resvg-js-2.6.2-source.tar.gz

Checksums: https://freshconvert.com/open-source/SHA256SUMS.txt
Notices: https://freshconvert.com/third-party-notices.txt

HEIC: libheif-js 1.23.5 (LGPL-3.0), source commit
 d8ec4bc3bc5bf8055975577bccbbc7e1d7313c2d.
Its build fetches libheif-emscripten tag v1.23.5, whose libheif submodule is
 413e2a87e6a70b3eccc3a3adc5801179dd2d9e00.
The source packages above include the wrapper, build workflow, libheif source
and libde265 1.0.15 source. COPYING includes the full LGPL/GPL license texts.
To rebuild, use the emscripten workflow included in that source archive:
Emscripten 3.1.61, USE_WASM=1, USE_UNSAFE_EVAL=0, USE_TYPESCRIPT=1.
The libheif build-emscripten.sh contains the dependency and compiler commands.
Place the supplied libde265 source tarball at the build script's expected path
to build without re-downloading it. Use the wrapper's scripts/install.js with
your rebuilt libheif archive to prepare its JS/WASM distribution.

SVG: @resvg/resvg-wasm 2.6.2 (MPL-2.0). The full resvg-js source archive
includes the Rust/Cargo and JavaScript package sources and build instructions.
Use its wasm package build with the pinned Cargo.lock dependencies.

Replacing a codec in this application:
- Rebuild the codec with a compatible public API.
- Replace its JS/WASM files in the corresponding installed package (or point
  the imports to your build) and run the website's production build again.
- HEIC imports: src/converters/heic.ts.
- SVG imports: src/converters/svg.ts.
- The resulting static modules/WASM are served separately; there is no
  integrity or signature restriction preventing a compatible replacement.
- Re-run output, CSP and browser tests, and ship updated notices and sources.
The applicable open-source licenses govern modification and reverse engineering
of their covered components; website terms do not override those permissions.

Other engine source references:
https://github.com/jamsinclair/jSquash/tree/main/packages/avif
https://github.com/jamsinclair/jSquash/tree/main/packages/webp
https://github.com/AOMediaCodec/libavif/tree/v1.0.1
https://aomedia.googlesource.com/aom/+/v3.7.0/
https://github.com/Hopding/pdf-lib
https://github.com/mozilla/pdf.js

PDF.js versioned CMaps, fonts and WASM include their upstream licenses in the
same directories. All downloads are supplied without warranty under their
respective upstream licenses.