lamejs 1.2.1 — pure JavaScript MP3 encoder (port of LAME 3.98)
================================================================

Used by: /assets/js/tools/audio-editor-mp3-worker.js (Audio Editor, MP3 export).
Loaded only inside that Web Worker via importScripts(); never on the page itself.

Source        : npm package "lamejs" 1.2.1 (https://www.npmjs.com/package/lamejs,
                https://github.com/zhuker/lamejs), author Alex Zhukov
Fetched       : 2026-11-02 with `npm pack lamejs@1.2.1`
Tarball sha512: s7bxvjvYthw6oPLCm5pFxvA84wUROODB8jEO2+CE1adhKgrIvVOlmMgY8zyugxGrvRaDHNJanOiS21/emty6dQ==
                (matches the npm registry "dist.integrity")
File kept     : lame.min.js, byte-for-byte identical to the package file
lame.min.js sha256: 15d285e2587b3bdbfd18a68de6ce07cc074f7480a82c3815da2dc1c348ec6df4
Size          : 156 043 bytes, no source map reference

Licence: LGPL-3.0 per package.json (LAME sources: LGPL 2 or later).
  LICENSE.txt        the note shipped in the npm package
  COPYING.LESSER.txt GNU Lesser General Public License v3
  COPYING.txt        GNU General Public License v3 (incorporated by the LGPL v3)
The library is used unmodified, as a separate file, which the LGPL allows.

Security review (2026-11-02):
  - no eval, new Function, importScripts, fetch, XMLHttpRequest, WebSocket, DOM access;
  - only global created: `lamejs` (checked by running it in an isolated VM context);
  - the only URL is the string "http://www.mp3dev.org/" returned by an unused getter;
  - runs under the site CSP (script-src 'self', no 'unsafe-eval').

Known limits of this build: Mp3Encoder(channels, sampleRate, kbps) only exposes CBR
(no VBR, no Xing/LAME tag, no ID3); sample rates must be MPEG ones
(8000–48000 Hz); the audio editor resamples to the nearest one beforehand.