Source
The parsers, as plain text.
These are the files that read and remove metadata, exactly as they are compiled into the site. The shipped script carries a source map too, so the developer tools show them under src/lib.
index.tssniffs the format by its first bytes, dispatches, and holds the policyjpeg.tsJPEG segments: EXIF, XMP, IPTC, comments removed; ICC kept; orientation written backpng.tsPNG chunks: text, eXIf and tIME removed; iCCP keptooxml.tsWord, Excel, PowerPoint packages: properties emptied, thumbnail dropped, zip rewrittenpdf.tsPDF: the Info dictionary and uncompressed XMP blanked in place, same lengthexif.tsthe TIFF reader behind EXIF, with GPS and the orientation-only writerxmp.tsXMP packets and Photoshop IRB, IPTC datasetsxml.tsa small XML reader, so the same code runs in the browser, Node and a Workerzip.tsthe stored zip writer batch usesbytes.tsbyte helpers: slices, integers, CRC, inflate and deflatetypes.tsthe report shape every parser returns
The same files build the command line tool, the API and the extension. No metadata library sits behind any of them.
Watch it run.
Open the network panel, drop a file on the home page, and count the requests.