Wuffs (Wrangling Untrusted File Formats Safely) is a memory-safe, high-performance library for decoding and encoding a wide range of binary file formats, including images (PNG, JPEG, GIF, BMP, WebP), compression streams (gzip, zlib, bzip2, xz, lzma, deflate), and data formats (JSON, CBOR). Its core innovation is a custom domain-specific language (also called Wuffs) that is transpiled to C. The transpiler performs compile-time safety proofs (bounds checking, integer overflow, null pointers) using interval arithmetic, eliminating entire classes of vulnerabilities without runtime overhead. The library follows a 'Sans I/O' architecture, making it completely hermetic—no syscalls, no memory allocation, and no external dependencies at runtime. In production, Wuffs is deployed in Google Chrome for GIF decoding and is designed for use in security-critical environments like web browsers, operating systems, and firmware. The repository provides a single-file C library (stb-style) that can be easily integrated into any C/C++ project. It also includes a comprehensive set of command-line tools for testing, benchmarking, and code generation, as well as extensive fuzzing harnesses and unit tests for every supported codec. The architecture is divided into three main layers: the language toolchain (written in Go, comprising a parser, type checker, and C code generator), the standard library (written in the Wuffs language, defining the codecs), and the generated C library (the runtime artifact). The code generator produces highly optimized C code, including hand-written SIMD paths for pixel swizzling and CRC computation. The codebase exhibits exceptional craftsmanship. The interval arithmetic library used for compile-time proofs, the DEFLATE stream cutter for random-access compression, and the low-level JPEG encoder operating on DCT coefficients are all standout examples of non-obvious, reusable engineering. The base C library provides a masterclass in writing safe, performant, and portable C99 code without external dependencies.