iro.js 5.5.2, MORELESS rebuild 1 The original bundle header, copied unchanged: /*! * iro.js v5.5.2 * 2016-2021 James Daniel * Licensed under MPL 2.0 * github.com/jaames/iro.js */ MORELESS rebuilt the unmodified iro 5.5.2 TypeScript source with pinned @irojs/iro-core 1.2.1 and Preact 10.29.8 on 2026-10-28. The served file is a custom build and is not byte-identical to the publisher's npm bundle. The browser global API remains iro.version, iro.Color, iro.ColorPicker and its iro.ui components. No wrapper or core source patches were applied. Exact inputs, output checksums and compiler settings: BUILD.json Reproduction recipe: scripts/third-party/iro/build.mjs in the project repository Source Code Form for iro.js (MPL-2.0): src/iro-22d2c0e6bed949d441f05091283498cdb92bab02.tar.gz https://github.com/jaames/iro.js/tree/22d2c0e6bed949d441f05091283498cdb92bab02 Source Code Form for iro-core 1.2.1 (MPL-2.0): src/iro-core-bd46ac36225cc4de5ea2a8453cec4f69b8f40ba6.tar.gz https://github.com/irojs/iro-core/tree/bd46ac36225cc4de5ea2a8453cec4f69b8f40ba6 All seven TypeScript files embedded in the exact iro-core 1.2.1 package source map match this source archive byte for byte. The original source and license notices remain inside both source archives. Their full Mozilla Public License 2.0 texts are identical to LICENSE.txt. Source archive checksums are listed in src/SHA256SUMS. Bundled Preact 10.29.8 (MIT): https://registry.npmjs.org/preact/-/preact-10.29.8.tgz The complete license is copied unchanged from this exact package into LICENSE-preact.txt. BUILD.json records the archive checksum. The previous publisher-resolved Preact release was undetermined. The new build replaces that uncertainty with verified inputs. No claim is made that the old bundle was affected by a particular Preact advisory.