{
  "package": "heic-to",
  "version": "1.6.7",
  "license": "LGPL-3.0-or-later",
  "registryMetadata": "https://registry.npmjs.org/heic-to/1.6.7",
  "registryTarball": "https://registry.npmjs.org/heic-to/-/heic-to-1.6.7.tgz",
  "registryTarballBytes": 6336500,
  "registrySha1": "b72ad703ddb6a0b1827aff74b5fefab27c029ec5",
  "registrySri": "sha512-GCPYNl86u6eZ7mr2aa+uQB+PrQOVKSBYfH8esovr8kh2c6EYQSDYIJ6uhXSmM2hPC8PdBVJ/Trn0jnfM9H9gvg==",
  "tarballSha256": "ED832BFF73338B418EA9EA7882787798CD4DF15429A649603C4B950E7BA06F11",
  "repository": "https://github.com/hoppergee/heic-to.git",
  "gitHead": "78345a3fcdb4a1d70d513fce2646aeff0127f7ba",
  "packageEntry": "dist/csp/heic-to.js",
  "deployedEntry": "../vendor/heic-to-1.6.7-csp.js",
  "deployedEntrySha256": "E0A515585872C319C601C33551925C9D5FEE31746CAF0311291ED7E6364C592C",
  "buildFile": "esbuild.mjs",
  "cspBuildSource": "src/lib/libheif-without-unsafe-eval.js",
  "cspBuildSourceSha256": "75AAF03816C22F8CF40DBCAEB22BEE83F2E1C5DA4B7417577A7883B296348734",
  "embeddedComponentsDeclaredBySourceHeader": {
    "libheif": "1.23.7",
    "libde265": "1.0.16",
    "unsafeEval": false,
    "wasm": false
  },
  "integrityReview": "Registry SRI and downloaded tarball hashes matched during the isolated static audit.",
  "reproducibility": "Not established: the deployed bundle was not rebuilt from source.",
  "thirdPartyNoticeStatus": "The npm tarball contains the top-level LGPL license but no dedicated SBOM or embedded-codec notice file.",
  "releaseGate": "Obtain legal/license review of LGPL corresponding-source and embedded codec obligations before public release."
}