libheif-js 1.23.5 browser decoder is a separate replaceable LGPL library.
libheif 1.23.5 (LGPL-3.0): https://github.com/strukturag/libheif/archive/413e2a87e6a70b3eccc3a3adc5801179dd2d9e00.tar.gz
libde265 1.0.15 (LGPL-3.0): https://github.com/strukturag/libde265/releases/download/v1.0.15/libde265-1.0.15.tar.gz
Build wrapper: https://github.com/catdad-experiments/libheif-emscripten/archive/refs/tags/v1.23.5.tar.gz
Build: Ubuntu 22.04, Emscripten 3.1.61; USE_WASM=1 USE_UNSAFE_EVAL=0 USE_TYPESCRIPT=1; AOM=0.
Corresponding build scripts and complete license notices accompany this directory. You may replace this library and reverse-engineer the combined work for debugging changes to the library as allowed by LGPL.
Nerdamer 1.1.13: MIT license, Martin Donk, see nerdamer-LICENSE.txt. Source https://www.npmjs.com/package/nerdamer/v/1.1.13

Exact corresponding source downloads hosted with this version:
/vendor/sources/libheif-1.23.5.tar.gz
/vendor/sources/libde265-1.0.15.tar.gz
/vendor/sources/libheif-emscripten-1.23.5.tar.gz