Expand description
Little-endian field readers that return a typed error instead of
panicking. Every on-disk decoder used to spell u32::from_le_bytes( b[..4].try_into().unwrap()); the slice was always pre-checked, but a
runtime that opens third-party files should not carry an unwrap on
its parse path at all (clippy::unwrap_used is denied workspace-wide).
A wrong length here is a decoder bug surfaced as UnexpectedEof.