mirror of
https://github.com/zhw2590582/ArtPlayer.git
synced 2026-10-08 19:06:15 -08:00
1352 lines
60 KiB
JSON
1352 lines
60 KiB
JSON
{
|
|
"schemaVersion": 1,
|
|
"task": "BASE-07",
|
|
"sourceCommit": "e01f39ff",
|
|
"capturedAt": "2026-09-10T12:58:34.266Z",
|
|
"note": "Maintained provenance inventory. Unknown versions/licenses remain open. No complete legal, security or runtime audit is claimed; remote services were not invoked. Fingerprints cover selected copied assets, not every repository media file.",
|
|
"packages": [
|
|
{
|
|
"name": "artplayer",
|
|
"declaredRuntimeDependencies": {
|
|
"option-validator": "^2.0.6"
|
|
},
|
|
"resolvedRuntimeDependencies": [
|
|
{
|
|
"name": "option-validator",
|
|
"range": "^2.0.6",
|
|
"lockedVersion": "2.0.6",
|
|
"installedVersion": "2.0.6",
|
|
"manifestLicense": "MIT",
|
|
"licenseEvidence": "Installed package manifest claim; bundled notice and transitive/license review remain with the owning package."
|
|
}
|
|
],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-ads",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-ambilight",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-asr",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-audio-track",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-auto-thumbnail",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-chapter",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-chromecast",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-danmuku",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-danmuku-mask",
|
|
"declaredRuntimeDependencies": {
|
|
"@mediapipe/selfie_segmentation": "^0.1.1675465747",
|
|
"@tensorflow-models/body-segmentation": "^1.0.2",
|
|
"@tensorflow/tfjs-backend-cpu": "^4.21.0",
|
|
"@tensorflow/tfjs-backend-webgl": "^4.21.0",
|
|
"@tensorflow/tfjs-converter": "^4.21.0",
|
|
"@tensorflow/tfjs-core": "^4.21.0"
|
|
},
|
|
"resolvedRuntimeDependencies": [
|
|
{
|
|
"name": "@mediapipe/selfie_segmentation",
|
|
"range": "^0.1.1675465747",
|
|
"lockedVersion": "0.1.1675465747",
|
|
"installedVersion": "0.1.1675465747",
|
|
"manifestLicense": "Apache-2.0",
|
|
"licenseEvidence": "Installed package manifest claim; bundled notice and transitive/license review remain with the owning package."
|
|
},
|
|
{
|
|
"name": "@tensorflow-models/body-segmentation",
|
|
"range": "^1.0.2",
|
|
"lockedVersion": "1.0.2",
|
|
"installedVersion": "1.0.2",
|
|
"manifestLicense": "Apache-2.0",
|
|
"licenseEvidence": "Installed package manifest claim; bundled notice and transitive/license review remain with the owning package."
|
|
},
|
|
{
|
|
"name": "@tensorflow/tfjs-backend-cpu",
|
|
"range": "^4.21.0",
|
|
"lockedVersion": "4.22.0",
|
|
"installedVersion": "4.22.0",
|
|
"manifestLicense": "Apache-2.0",
|
|
"licenseEvidence": "Installed package manifest claim; bundled notice and transitive/license review remain with the owning package."
|
|
},
|
|
{
|
|
"name": "@tensorflow/tfjs-backend-webgl",
|
|
"range": "^4.21.0",
|
|
"lockedVersion": "4.22.0",
|
|
"installedVersion": "4.22.0",
|
|
"manifestLicense": "Apache-2.0",
|
|
"licenseEvidence": "Installed package manifest claim; bundled notice and transitive/license review remain with the owning package."
|
|
},
|
|
{
|
|
"name": "@tensorflow/tfjs-converter",
|
|
"range": "^4.21.0",
|
|
"lockedVersion": "4.22.0",
|
|
"installedVersion": "4.22.0",
|
|
"manifestLicense": "Apache-2.0",
|
|
"licenseEvidence": "Installed package manifest claim; bundled notice and transitive/license review remain with the owning package."
|
|
},
|
|
{
|
|
"name": "@tensorflow/tfjs-core",
|
|
"range": "^4.21.0",
|
|
"lockedVersion": "4.22.0",
|
|
"installedVersion": "4.22.0",
|
|
"manifestLicense": "Apache-2.0",
|
|
"licenseEvidence": "Installed package manifest claim; bundled notice and transitive/license review remain with the owning package."
|
|
}
|
|
],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-dash-control",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-document-pip",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-hls-control",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-jassub",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-multiple-subtitles",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-vast",
|
|
"declaredRuntimeDependencies": {
|
|
"@alugha/ima": "2.1.0",
|
|
"@glomex/vast-ima-player": "^1.21.2"
|
|
},
|
|
"resolvedRuntimeDependencies": [
|
|
{
|
|
"name": "@glomex/vast-ima-player",
|
|
"range": "^1.21.2",
|
|
"lockedVersion": "1.21.2",
|
|
"installedVersion": "1.21.2",
|
|
"manifestLicense": "Apache-2.0",
|
|
"licenseEvidence": "Installed package manifest claim; bundled notice and transitive/license review remain with the owning package."
|
|
},
|
|
{
|
|
"name": "@alugha/ima",
|
|
"range": "2.1.0",
|
|
"lockedVersion": "2.1.0",
|
|
"installedVersion": "2.1.0",
|
|
"manifestLicense": "MIT",
|
|
"licenseEvidence": "Installed package manifest and LICENSE.md; direct dependency supplies the public declaration chain referenced by Glomex."
|
|
}
|
|
],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-vtt-thumbnail",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-proxy-canvas",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-proxy-mediabunny",
|
|
"declaredRuntimeDependencies": {
|
|
"mediabunny": "^1.43.1"
|
|
},
|
|
"resolvedRuntimeDependencies": [
|
|
{
|
|
"name": "mediabunny",
|
|
"range": "^1.43.1",
|
|
"lockedVersion": "1.56.1",
|
|
"installedVersion": "1.56.1",
|
|
"manifestLicense": "MPL-2.0",
|
|
"licenseEvidence": "Installed package manifest claim; bundled notice and transitive/license review remain with the owning package."
|
|
}
|
|
],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-tool-iframe",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-tool-thumbnail",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-vitepress",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {
|
|
"flexsearch": "0.8.158",
|
|
"markdown-it": "14.1.0",
|
|
"vitepress": "1.6.3",
|
|
"vitepress-plugin-search": "1.0.4-alpha.22",
|
|
"vue": "3.5.13"
|
|
}
|
|
}
|
|
],
|
|
"vendored": [
|
|
{
|
|
"id": "screenfull",
|
|
"riskId": "VENDOR-01",
|
|
"inputs": [
|
|
"packages/artplayer/src/libs/screenfull.js"
|
|
],
|
|
"owners": [
|
|
"CORE-12"
|
|
],
|
|
"sourceStatus": "Fixed v6.0.2 comparison reference with four verified local adaptations; original acquisition tag is not recorded. Runtime file unchanged.",
|
|
"licenseStatus": "Pinned upstream MIT notice included verbatim in actual core tarball and all three standalone bundle headers; verified in CORE-12. Local copied implementation unchanged.",
|
|
"upstreamSources": [
|
|
"https://raw.githubusercontent.com/sindresorhus/screenfull/v6.0.2/index.js",
|
|
"https://raw.githubusercontent.com/sindresorhus/screenfull/v6.0.2/license"
|
|
],
|
|
"upstreamReviewedAt": "2026-09-11",
|
|
"updatePolicy": "Keep separate from owned TS migration. Verify source/version/diff and license notices before replacement; preserve API/CSS/worker URLs and run owning package tests.",
|
|
"fingerprints": [
|
|
{
|
|
"path": "packages/artplayer/src/libs/screenfull.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "2332b50c0c6364d5c99080be0f5739255e4b9e465d2cca40f761adce9a1908f8"
|
|
}
|
|
],
|
|
"reviewEvidence": [
|
|
"refactor/changes/2026-09-11-CORE-12-template-resources.md",
|
|
"refactor/baselines/core-vendor/sources.json",
|
|
"refactor/scripts/core-vendor.mjs",
|
|
"test/core-vendor.test.js",
|
|
"refactor/baselines/template-resources-validation.json"
|
|
]
|
|
},
|
|
{
|
|
"id": "hint.css",
|
|
"riskId": "VENDOR-02",
|
|
"inputs": [
|
|
"packages/artplayer/src/style/hint.less"
|
|
],
|
|
"owners": [
|
|
"CORE-12"
|
|
],
|
|
"sourceStatus": "Header identifies v2.7.0; full normalized CSS comparison verifies ArtPlayer scoping, font-style and default color adaptations. Runtime file unchanged.",
|
|
"licenseStatus": "Pinned upstream MIT notice included verbatim in actual core tarball and all three standalone bundle headers; verified in CORE-12. Local copied implementation unchanged.",
|
|
"upstreamSources": [
|
|
"https://raw.githubusercontent.com/chinchang/hint.css/v2.7.0/hint.css",
|
|
"https://raw.githubusercontent.com/chinchang/hint.css/v2.7.0/LICENSE"
|
|
],
|
|
"upstreamReviewedAt": "2026-09-11",
|
|
"updatePolicy": "Keep separate from owned TS migration. Verify source/version/diff and license notices before replacement; preserve API/CSS/worker URLs and run owning package tests.",
|
|
"fingerprints": [
|
|
{
|
|
"path": "packages/artplayer/src/style/hint.less",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "e2dc4940e6b212d8da75a404fd5ff1ad894008457677bc37554c6b64b735bc31"
|
|
}
|
|
],
|
|
"reviewEvidence": [
|
|
"refactor/changes/2026-09-11-CORE-12-template-resources.md",
|
|
"refactor/baselines/core-vendor/sources.json",
|
|
"refactor/scripts/core-vendor.mjs",
|
|
"test/core-vendor.test.js",
|
|
"refactor/baselines/template-resources-validation.json"
|
|
]
|
|
},
|
|
{
|
|
"id": "webvtt-parser",
|
|
"riskId": "VENDOR-03",
|
|
"inputs": [
|
|
"packages/artplayer-plugin-multiple-subtitles/src/parser.js"
|
|
],
|
|
"owners": [
|
|
"PKG-MULTI-SUB-01"
|
|
],
|
|
"sourceStatus": "Pinned 380cfcce34ba8b472d3a31474874eb72a0e5f460 comparison reference; exact normalized executable body matches local ESM and historical shipped IIFE adaptations. Historical acquisition revision remains unknown.",
|
|
"licenseStatus": "Complete pinned CC0 dedication retained in package notices and actual tarball/standalone main, legacy and ESM banners.",
|
|
"upstreamSources": [
|
|
"https://raw.githubusercontent.com/w3c/webvtt.js/380cfcce34ba8b472d3a31474874eb72a0e5f460/parser.js",
|
|
"https://raw.githubusercontent.com/w3c/webvtt.js/380cfcce34ba8b472d3a31474874eb72a0e5f460/LICENSE.md",
|
|
"https://raw.githubusercontent.com/w3c/webvtt.js/380cfcce34ba8b472d3a31474874eb72a0e5f460/package.json"
|
|
],
|
|
"upstreamReviewedAt": "2026-09-13",
|
|
"updatePolicy": "Keep separate from owned TS migration. Verify source/version/diff and license notices before replacement; preserve API/CSS/worker URLs and run owning package tests.",
|
|
"fingerprints": [
|
|
{
|
|
"path": "packages/artplayer-plugin-multiple-subtitles/src/parser.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "ba582074d57fa2d72880e6e4253fe14646787916b2b68e2a1e748e685cf96ab1"
|
|
}
|
|
],
|
|
"verificationEvidence": [
|
|
"refactor/changes/2026-09-13-PKG-MULTI-SUB-01-contract.md",
|
|
"refactor/baselines/multiple-subtitles-contract-validation.json",
|
|
"refactor/baselines/multiple-subtitles-vendor/sources.json",
|
|
"refactor/scripts/multiple-subtitles-vendor.mjs",
|
|
"test/multiple-subtitles-vendor.test.js",
|
|
"packages/artplayer-plugin-multiple-subtitles/THIRD_PARTY_NOTICES"
|
|
]
|
|
},
|
|
{
|
|
"id": "jassub-code-and-workers",
|
|
"riskId": "VENDOR-04",
|
|
"inputs": [
|
|
"packages/artplayer-plugin-jassub/src/jassub.es.js",
|
|
"packages/artplayer-plugin-jassub/worker",
|
|
"docs/assets/jassub/jassub-worker.js",
|
|
"docs/assets/jassub/jassub-worker.wasm",
|
|
"docs/assets/jassub/jassub-worker-modern.wasm"
|
|
],
|
|
"owners": [
|
|
"PKG-JASSUB-01",
|
|
"PKG-JASSUB-06",
|
|
"PKG-JASSUB-07",
|
|
"PKG-JASSUB-08",
|
|
"PKG-JASSUB-09"
|
|
],
|
|
"sourceStatus": "Original wrapper matched npm 1.8.8; PKG-JASSUB-07 now carries an explicitly recorded local lifecycle/clock/query patch (baselines/jassub-vendor-patch.json). Worker JS is unchanged. Both WASM binaries still exactly match Pages nightly 747e392d7f6fe7c38bbcdfe05c9ada46b0b62daf/source 6b19a04ddfbad8f9bfd3237395788dd76218841b. Original wrapper hash, unchanged binaries/fonts, pinned build and submodules remain separately recorded; no independent WASM rebuild.",
|
|
"licenseStatus": "Matching source LICENSE and nightly COPYRIGHT identified and byte-verified; full component notice assembly, LGPL source/distribution review and full FreeType license remain PKG-JASSUB-06 gates. VENDOR-04 remains open.",
|
|
"upstreamSources": [
|
|
"https://github.com/ThaUnknown/jassub/blob/main/LICENSE",
|
|
"https://registry.npmjs.org/jassub/-/jassub-1.8.8.tgz",
|
|
"https://github.com/ThaUnknown/jassub/tree/25d1ea7ca1f827dbed2c8ea539c9bc917ccbfab1",
|
|
"https://github.com/ThaUnknown/jassub/tree/6b19a04ddfbad8f9bfd3237395788dd76218841b",
|
|
"https://github.com/ThaUnknown/jassub/commit/747e392d7f6fe7c38bbcdfe05c9ada46b0b62daf"
|
|
],
|
|
"upstreamReviewedAt": "2026-09-14",
|
|
"updatePolicy": "Keep separate from owned TS migration. Verify source/version/diff and license notices before replacement; preserve API/CSS/worker URLs and run owning package tests.",
|
|
"fingerprints": [
|
|
{
|
|
"path": "docs/assets/jassub/jassub-worker-modern.wasm",
|
|
"algorithm": "sha256",
|
|
"sha256": "8a8b37463713d1f2ddbc1fbb8a35889d9565e5a6670851758b46b2216d8e513c"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/jassub-worker.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "0fb9a83f96fc39426e733a94f3e7fe4e37099324c08328450ba032b653e85707"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/jassub-worker.wasm",
|
|
"algorithm": "sha256",
|
|
"sha256": "73880d99ba9260ac39fc4476491cf254ca784c76f3af2fb03f3f9be8065ad3c0"
|
|
},
|
|
{
|
|
"path": "packages/artplayer-plugin-jassub/src/jassub.es.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "ebabca473edfbe7f9768dba25b2c2403f2c9c5dec64292fa008d8eb758e32696"
|
|
},
|
|
{
|
|
"path": "packages/artplayer-plugin-jassub/worker/jassub-worker-modern.wasm",
|
|
"algorithm": "sha256",
|
|
"sha256": "8a8b37463713d1f2ddbc1fbb8a35889d9565e5a6670851758b46b2216d8e513c"
|
|
},
|
|
{
|
|
"path": "packages/artplayer-plugin-jassub/worker/jassub-worker.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "0fb9a83f96fc39426e733a94f3e7fe4e37099324c08328450ba032b653e85707"
|
|
},
|
|
{
|
|
"path": "packages/artplayer-plugin-jassub/worker/jassub-worker.wasm",
|
|
"algorithm": "sha256",
|
|
"sha256": "73880d99ba9260ac39fc4476491cf254ca784c76f3af2fb03f3f9be8065ad3c0"
|
|
}
|
|
],
|
|
"localPatch": {
|
|
"task": "PKG-JASSUB-07",
|
|
"record": "refactor/baselines/jassub-vendor-patch.json",
|
|
"originalSha256LF": "b973508ade00b5b9cea2f299d49f4943003372729be7350b6938e44fddb32038",
|
|
"patchedSha256LF": "1fdcf24d206e8711348dddcb5fe7b656007a9b1d81a992bb497c6d10bd0a2cdb",
|
|
"followUp": "refactor/baselines/jassub-offscreen-patch.json",
|
|
"followUps": [
|
|
"refactor/baselines/jassub-offscreen-patch.json",
|
|
"refactor/baselines/jassub-hybrid-patch.json",
|
|
"refactor/baselines/jassub-render-patch.json"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"id": "jassub-font-assets",
|
|
"riskId": "VENDOR-05",
|
|
"inputs": [
|
|
"docs/assets/jassub/default.woff2",
|
|
"docs/assets/jassub/fonts"
|
|
],
|
|
"owners": [
|
|
"PKG-JASSUB-01",
|
|
"SITE-01",
|
|
"PKG-JASSUB-06"
|
|
],
|
|
"sourceStatus": "All 11 unique fonts and default alias exactly match historical upstream Pages blobs. Original acquisition/redistribution permissions are not established by that identity. See baselines/jassub-provenance.json.",
|
|
"licenseStatus": "Five open-font notice assemblies and six unresolved font permissions remain explicit in the supplement. PKG-JASSUB-06 / SITE-01 must resolve actual package/Pages redistribution scope; VENDOR-05 remains open.",
|
|
"upstreamSources": [
|
|
"https://github.com/ThaUnknown/jassub/tree/25d1ea7ca1f827dbed2c8ea539c9bc917ccbfab1"
|
|
],
|
|
"upstreamReviewedAt": "2026-09-14",
|
|
"updatePolicy": "Keep separate from owned TS migration. Verify source/version/diff and license notices before replacement; preserve API/CSS/worker URLs and run owning package tests.",
|
|
"fingerprints": [
|
|
{
|
|
"path": "docs/assets/jassub/default.woff2",
|
|
"algorithm": "sha256",
|
|
"sha256": "886929903707c5bb28b07cd2eed69921b3d5ef5c49c73a0dd1e187ebf6546a4c"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/fonts/Averia Sans Libre Light.ttf",
|
|
"algorithm": "sha256",
|
|
"sha256": "df4ca526f9a941afda1f9c5a275695beb066a531f5b008c1e28ddc2c5f6e4390"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/fonts/Averia Serif Simple Light.ttf",
|
|
"algorithm": "sha256",
|
|
"sha256": "fb6398238298a7010920e1c216f7b29bc920477bc810f8bcc677ae4e6f411b4b"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/fonts/FRABK.TTF",
|
|
"algorithm": "sha256",
|
|
"sha256": "9ad3d0e5ef31c4a9a98cb0e169e4e625286aa34c712add3e001c0100138730d4"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/fonts/Gramond.ttf",
|
|
"algorithm": "sha256",
|
|
"sha256": "072859788bc577d35df2e852225c52cc5670339a4859d86b5edb96b1724a2177"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/fonts/Lato-Regular.ttf",
|
|
"algorithm": "sha256",
|
|
"sha256": "6f6940be0835c3ddec9199e5fc42be4cbc61ebcfd58c623fdf719366253f1780"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/fonts/SlatePro-Medium.otf",
|
|
"algorithm": "sha256",
|
|
"sha256": "56aa0fc2878bf782c10e5bba6dc45de1982a572d14ba9e10cd9d5a4414b6171e"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/fonts/allison-script.regular.otf",
|
|
"algorithm": "sha256",
|
|
"sha256": "97cd66bb6f89bdd32af2a9592f439536c85aa7553516514e2623bb1e81c65bd6"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/fonts/architext.regular.ttf",
|
|
"algorithm": "sha256",
|
|
"sha256": "a6b8e33ce190ee9c871590b982cff37e137b303bb73dcab55ef3ff7154ba143a"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/fonts/arial.ttf",
|
|
"algorithm": "sha256",
|
|
"sha256": "c9b76220a5be42ead4733611e417cd65c5fd8aeaa33eb56576ac378a37d130a1"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/fonts/chawp.otf",
|
|
"algorithm": "sha256",
|
|
"sha256": "9107241585a4328ce1438dfeabbfb1a8d0cd513dab6902be9a1a5774eab607c6"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/fonts/default.woff2",
|
|
"algorithm": "sha256",
|
|
"sha256": "886929903707c5bb28b07cd2eed69921b3d5ef5c49c73a0dd1e187ebf6546a4c"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "monaco-static-assets",
|
|
"riskId": "VENDOR-06",
|
|
"inputs": [
|
|
"docs/assets/js/vs"
|
|
],
|
|
"owners": [
|
|
"SITE-01",
|
|
"SITE-05"
|
|
],
|
|
"sourceStatus": "Monaco 0.30.1 verified against official npm archive: 98 byte-exact files, one CSS newline-only difference. The bundled font additionally matches @vscode/codicons 0.0.26 exactly; see site-codicons-provenance.json.",
|
|
"licenseStatus": "Full Monaco LICENSE/ThirdPartyNotices and Codicons 0.0.26 historical LICENSE, LICENSE-CODE, README plus attribution are distributed and HTTP verified. Broader bundled-component notice completeness audit remains under VENDOR-06; do not infer permission for other fonts or media.",
|
|
"upstreamSources": [
|
|
"https://registry.npmjs.org/monaco-editor/-/monaco-editor-0.30.1.tgz",
|
|
"https://registry.npmjs.org/@vscode/codicons/-/codicons-0.0.26.tgz"
|
|
],
|
|
"upstreamReviewedAt": "2026-09-15",
|
|
"updatePolicy": "Keep separate from owned TS migration. Verify source/version/diff and license notices before replacement; preserve API/CSS/worker URLs and run owning package tests.",
|
|
"fingerprints": [
|
|
{
|
|
"path": "docs/assets/js/vs/base/browser/ui/codicons/codicon/codicon.ttf",
|
|
"algorithm": "sha256",
|
|
"sha256": "ff6b888d65cfd8077d49c6c704c1bfc8f2ce1ed71db9c583c63e0a49f046c79c"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/base/worker/workerMain.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "3ebdb68f45f9fed1c587901c9db42dd70e8a552421e330f39116fc7b078ba67e"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/abap/abap.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "49638217243bab4ed7d928d194bafe334abb614777440bf46f8636b9e5dfe0a4"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/apex/apex.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "034f340001e4c340b80e18abe45c990564931c4a061b4e74de86c012fb7d7a21"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/azcli/azcli.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "be50c776891279c9717db0d48a20d6d99f07cb60d2d8d279422fa917826683cf"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/bat/bat.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "3ec5d66f73ee7e7dc2b43db5999a768d1a54e933de9f507015fe7709a184adee"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/bicep/bicep.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "59d02b8930e36e2cbc3e472e263f881a82d84da292a79faf1d379cb060a2d7e1"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/cameligo/cameligo.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "f93cd405c71f97f26b4739f7f917b242e82a993ad42884422a43bf27d5b413e2"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/clojure/clojure.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "9e99cf86bcfb25c1b33bac9e26e11e4646868fa753356c7d737cfb24b7b1e49c"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/coffee/coffee.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "90d6aae23c9f5e4f335df5cb57634fa0193a102629deb88b98f238b4025f0551"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/cpp/cpp.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "ece3d119688eaf8a37fffae388118b12f8724ac2c3c8ff10d44caf2e91026424"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/csharp/csharp.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "d6367d0d67c0612cf37d25319e00cda2e4e38869a3c3200b1bfcd856cfe7fb4b"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/csp/csp.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "01241c709a7dddc0b5cedffb6dcf913a5d95c826eb68e2c27f114640719af7df"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/css/css.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "1f8468a126f6bfdc43d49a75e0ae758de913ebf55e685165adb6d069a454de5c"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/dart/dart.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "6b410bbe17b8ebcaed969bdfcf8049df6fe863482756ae73d2aebb919630034c"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/dockerfile/dockerfile.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "315769a72a2877f8ddddf9497a2e7e259e8df51cc38232ddf76fbe4556c0d7cd"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/ecl/ecl.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "fc412fe18e564cff17e9a0bcd5674ba15c49f4739417cf589ce1c546b21033a9"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/elixir/elixir.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "130d310090d723f51111d573000a72aa26fe44c9d79e6d04d12524e6631cfb6b"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/flow9/flow9.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "fafd88d973aed314454cd7d842b270125553f7a7613bb068c3c799a21ac61b64"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/fsharp/fsharp.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "32027afd4be75ddeca6c7beb9b52eda07d59afe3ea39a84f0696a6b3d074dcbf"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/go/go.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "c93466a4479ee8aa5e3ec70a89b469db1277b801d1551d40ad700d5abd367363"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/graphql/graphql.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "60a8825e939ca81540eb6ac00b17867b3e55af97bff99a9fa40c422a4281bdcf"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/handlebars/handlebars.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "5a174247aa64c7a064fc977365bb1c7161b4c97e559a6121773188c25df9d9a2"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/hcl/hcl.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "6053e90b8aa918c9744f41dcb1c0e58229a4946f0968a39b00776c3893538f54"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/html/html.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "6e7ae0ce7f07ec01c64db1368869715c115690e40fb5c183d5ced0d2716038bd"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/ini/ini.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "ecdb5c36a38a8b68af6384789c380d0e28b5b3df86de9c3419d348e688b8810e"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/java/java.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "8fd9c491b67dfa9ab831ed71a3973cc6ffc840f438f41114a794163672f4cf9c"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/javascript/javascript.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "bbd7fb1b714d347704eae4c74cb36c352876864f2103a69af3965f32c1c982c6"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/julia/julia.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "ef3783cbb81cee25697c0bddc9476813b593fb64712c21bc60099c8109c748f0"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/kotlin/kotlin.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "31b082803acb08622aa2dd736dca42772f6a0d3224fdb7c0e9c3e1f17800ca32"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/less/less.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "5ba9296cc5c6a7699028ac6e263631eb9284f80bfbffe99a4429f6c85dfc0589"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/lexon/lexon.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "2be27259788a7a4a6fb94a59150b47d169ef6e04933f76977e568c4cb0227f57"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/liquid/liquid.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "f4454c09b7e66ab2ffd81451aef2f12c79c0011839e19bcdb0fce42928acce6b"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/lua/lua.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "f39154e727c8d3df5c70ecab1737c0a07df3011977288ba4adc7d25c8ef639b5"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/m3/m3.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "a3b616444441f34b90b4e06a6a3a845f2804da67220c19721b9461140eb7f074"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/markdown/markdown.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "47ae9f567af2e69e682d14703bf4ad5428708464edb3d30791f3255a2863a52e"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/mips/mips.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "fcc6104a8c7092794744a1472511cd348d585d1cba0421e61e5eb8e0c58af186"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/msdax/msdax.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "f98e43f6600e629bfc354196006a02f9f9cc26480de064cc480e3bc885beb283"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/mysql/mysql.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "1cafe5b6c81234fc6680a421dd6290ec590ce03b9e525eacb0936a78ab50aeae"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/objective-c/objective-c.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "7cfdb8b492b6f1c5a1d83fefc3bd349bb1acdd489516534aefacd553c2850e75"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/pascal/pascal.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "f2886264f5ad42d173ef18e8ea961f674090be7513f48af95dcef4eb1191cac3"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/pascaligo/pascaligo.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "3d3317429e0837f6960e33829a2c2fd62119ca1514ad735f62345da8fd1dd817"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/perl/perl.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "317b527f0ade315a7cb066eac72672e5f2ba6d0c02c6014be052c32fb6566aed"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/pgsql/pgsql.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "f58b4ab8529e311f7f98f690ed39e13de22f3ae29cc8916bf99c21ac86917970"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/php/php.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "3d7d187fb2e3b959adfda7b7557ccda4b6f690f838babc525cabffbe0dda7dd0"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/pla/pla.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "6138b0b0a1be95370c00afe6eca5022ea10e8b0f11f1db9382163f28975373e6"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/postiats/postiats.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "5b18eac81236e88ffca2e67e527fa1d6fb42f53a4df42c1fbeb37312a9ec2fe4"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/powerquery/powerquery.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "fb9705793a687b03fe08605f19c3f1019d83cf06394a8381db541bda92e230d4"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/powershell/powershell.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "b80339b4a8450fd3a5bb5bf3817fb1b67fe6202690fc1ce97ef22336bcd7053b"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/protobuf/protobuf.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "18f13fbd6b421023eec480901e48354d249bc9c3dce9d0e0cc842cbab4393fd3"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/pug/pug.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "dbce9bb879b84cf3bf8bd05643a4d3d2ae6ded03b4a9234a0e8d2ebfab6ade44"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/python/python.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "b0c9cb9c96d3b289b4ee1bb6ca921e810d87ec2967ebaf8608d5570865ac6524"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/qsharp/qsharp.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "6cf9e660e8082f7a8dff4e8041c58c5e9fed1e622e0301b359886a5148c15327"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/r/r.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "889684005db07d8b2e8c6f17d54b7bbf1bd67ad948b0b9ca411c2e55ba3433dd"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/razor/razor.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "da07ee116d392fbf97f5adc9d4f1fd46e5bbbe9765949c8cb9a6f6a4917ce6cb"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/redis/redis.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "286518ee6a7e76356149bebfbcdc19d2d30c19a5fa48d4bfcbf2f7a946783bd0"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/redshift/redshift.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "8b865d41e76c227f3e1eb3bc74f8e9cf24627b449cc94164c803c1e515a9bbfd"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/restructuredtext/restructuredtext.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "32c72e9b8fa318289b628efee24bc5b573e3f74f8ab7dd544dead1b3545fc351"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/ruby/ruby.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "93a9fbda62d9b4ef5537de37d7b4c77a89d8e2b0a2193dddac534ce98da47b5f"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/rust/rust.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "6352c16af73494a44e09b5ccad8a61c0369933d94881fcf58a7e8a75a27315cf"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/sb/sb.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "7323046d28f72e54b5abda684d4ec67d55b688a0b5e1d23ffe1d675c1c141b69"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/scala/scala.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "57309bc0e00edda2c4edb5fd255e042e1ef6ce8d51f51c7e822a74268e04f444"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/scheme/scheme.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "3fe89a5618aa1c4eafa5c65aad212fcf2ba34e302de73df7db0867ba01dbd866"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/scss/scss.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "b01dfbdbd787642ed55a3ca7b0b89b2edb80e4aa486d89fee0ba748124dad4f9"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/shell/shell.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "39063f662fa62eb543e5d8f9b792b31d14c484abafd9a67943dae52fc9f5ce36"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/solidity/solidity.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "e25859bb2a1babe193f03028489c95296b1bfe98a92dcb450d4c539661b5a86d"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/sophia/sophia.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "4ba061aa0beb82ba64efeb6bd1128da0d3445ac8cfc26d3f4591c66df0fa4bb0"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/sparql/sparql.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "162783ddf2dd67384d379ebf485f6ed0cafd820e892e4d89e82c8ba8617390c4"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/sql/sql.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "3b1decbf86cb0b163070cc144e826f104ba10468798b36e6d0e64257a35fd1f8"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/st/st.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "b3ac35684d5668c2d08105cec31f43e8d897e4ab94103d8bd64ac804d256c20c"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/swift/swift.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "288a0ad2974e332bb873bacbb2a284f8f39cdc7d12b1fd5e3c46699147a63633"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/systemverilog/systemverilog.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "40b18f15d29e3201142eb02fd5cc5ad690b32386bbe5dc0a874fd68a2f176f41"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/tcl/tcl.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "317b63a872ce538d4eef5dae701641670fd3f99dfc0439465d444b2992b69bea"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/twig/twig.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "c3442379367d5ef43f1377a14e3c6a04ec451dabb05bed200571ea6dc328dfa0"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/typescript/typescript.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "25dd318efd5aada375fdf391c488bd0b5ec0d665ba16e49f1e7968217ad01139"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/vb/vb.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "41d3d863c8b955c53eddb8724866a487d3632995114c77c0e9bc416227d148bf"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/xml/xml.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "95ddef452d5ff87f5c9f807d56f3f74964727677b5a55baa13a0a4870e2ae850"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/yaml/yaml.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "a6ffa854247873af58df3ad550bbdd474b2d8dbc1d1c730fce4e44dfcb5f9b62"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.css",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "6240d544d93236ac40dd3bd1ee49afbd27cb43e056c24c04a0c2cb37f1fd4587"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "05a50ed50bb013b6e7a82d25686186aa7bdff8b8209c7badab00e046b5e99618"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.nls.de.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "e31a518baf29ffce15a27ac80a6b5406ebf21c76657f3344f46c9ac0e6d0c202"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.nls.es.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "f86887a1575bc71f035e92eb68b3d4e8c4e351d93f3b98520660933fed984007"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.nls.fr.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "673214777e1ba3518abe1bbde8b5250cb18d65257054c8adf9cb5e1e49918d27"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.nls.it.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "66df8e46d4aa40b5393489efda7e8aee5ad5589fdf68fef03832e665f0aabc9c"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.nls.ja.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "4688d4dfa1ddf91cbfa7005e1110b12f79315706e7d56463c96e8bc688a3d60d"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.nls.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "4d4915b0ff284b77938d3be70b9000911554fc451263a7baa594d199ef170a0e"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.nls.ko.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "a6d39e2202fa271bfd5e04b83a5265bbe7ef73a945471c9e9fcb65ff8f1a8663"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.nls.ru.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "345850b05cc97c0c1978df43ee996a32da7cd33ba1a85be3b6958884a8307040"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.nls.zh-cn.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "30ce784d1733d424e221009e097760b813e629d63579bddb62f7a4f229b9011f"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.nls.zh-tw.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "ab5c148283e9afd0577afb5e522e45c6c2b323a0a12215b71f92155fbf003b74"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/language/css/cssMode.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "c0f3a99395d07b421ef75f6eb78389c6ef29477f6a05556f9b94e2bb918dd6c1"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/language/css/cssWorker.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "073e09f9301dcf147e40ef675e3f18d8cc29de9f49673ec8d17711569144552d"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/language/html/htmlMode.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "91f7b295ddc3b0b679c669b84865f3ace79fdd30bfcd814f2960c06f3e24d600"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/language/html/htmlWorker.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "0b14f0af7ae7ab85732574fb384496dae3e85d28f953188cc842eec468a8a457"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/language/json/jsonMode.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "9abacb664dcd8564f28ef004465da0f4b3c551b2741424bf42e61c0a26e61adb"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/language/json/jsonWorker.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "0eb929c56d44afddb3030c011913010311ce34e5eadb1129a3ce9cbafd4c771d"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/language/typescript/tsMode.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "35d94edaf7982c8b59c95cda38c5ebffcf93479ee91a5c9820b9bf60719351c2"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/language/typescript/tsWorker.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "95d7d318d3b6076692705bda50f69ccf2981aae6b06f240de5ac642f32970bf4"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/loader.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "be92515f6d2cbfc75cd240076246e8ccf6f698269c0402e367d2ee371655bbeb"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "vconsole",
|
|
"riskId": "VENDOR-07",
|
|
"inputs": [
|
|
"docs/assets/js/vconsole.min.js",
|
|
"scripts/site-vendor/vconsole/upstream.js"
|
|
],
|
|
"owners": [
|
|
"SITE-01",
|
|
"SITE-07",
|
|
"SITE-VCONSOLE-01"
|
|
],
|
|
"sourceStatus": "Exact 282381-byte reconstruction of npm 3.15.0 from commit 05d80398bae35e793774f74e3c052b4e530e293a and its frozen npm lockfile; 326 untruncated module records establish eight runtime package dependencies and webpack bootstrap. ArtPlayer retains the separate reviewed lifecycle patch.",
|
|
"licenseStatus": "Original vConsole LICENSE retained; missing referenced MIT text supplied separately with explicit attribution. All nine runtime-component notices are preserved in full, including both mutation-observer BSD notices. Actual HTTP delivery and fingerprints verified; see vconsole-notices-provenance/validation.json.",
|
|
"upstreamSources": [
|
|
"https://registry.npmjs.org/vconsole/-/vconsole-3.15.0.tgz",
|
|
"https://github.com/Tencent/vConsole/tree/05d80398bae35e793774f74e3c052b4e530e293a",
|
|
"https://opensource.org/license/mit"
|
|
],
|
|
"upstreamReviewedAt": "2026-09-15",
|
|
"updatePolicy": "Keep separate from owned TS migration. Verify source/version/diff and license notices before replacement; preserve API/CSS/worker URLs and run owning package tests.",
|
|
"fingerprints": [
|
|
{
|
|
"path": "docs/assets/js/vconsole.min.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "3d1b8c3aff5f415ccf3bdc3cdcec6e01cff5b4c64d4558c078ca33d003f616ac"
|
|
},
|
|
{
|
|
"path": "scripts/site-vendor/vconsole/upstream.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "671f47427e1e3048919147c765e9fb71e4ea40d79a8c2829089f499d3e9b9bf4"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "console-bundle",
|
|
"riskId": "VENDOR-08",
|
|
"inputs": [
|
|
"docs/assets/js/console.js"
|
|
],
|
|
"owners": [
|
|
"SITE-01"
|
|
],
|
|
"sourceStatus": "Frozen original 340306-byte Parcel bundle e00bbf82bf08c452825690372ded39a9b60f4baf438f0e7ce8300e9bc4629c03; 102-module map, Focm entry/W5CS view, React 17.0.2 globals and styled-components 5.3.3 literal identified. Full dependency versions and source reconstruction remain open. SITE-CONSOLE-01 replaces only Focm/W5CS bodies from owned TS and removes the missing source-map trailer; other 100 modules and runtime remain byte-for-byte frozen. Full vendor provenance remains open.",
|
|
"licenseStatus": "Root MIT is not sufficient evidence for all bundled components; inventory and notices pending.",
|
|
"upstreamSources": [],
|
|
"upstreamReviewedAt": null,
|
|
"updatePolicy": "Keep separate from owned TS migration. Verify source/version/diff and license notices before replacement; preserve API/CSS/worker URLs and run owning package tests.",
|
|
"fingerprints": [
|
|
{
|
|
"path": "docs/assets/js/console.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "5644af7bb35bb6d0bcfa7eeae9a21b406ac4fc1b499a6c797a6534c7d33f0678"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "thumbnail-tiny-emitter",
|
|
"riskId": "VENDOR-09",
|
|
"inputs": [
|
|
"packages/artplayer-tool-thumbnail/src/emitter.ts"
|
|
],
|
|
"owners": [
|
|
"PKG-TOOL-THUMB-04",
|
|
"PKG-TOOL-THUMB-06"
|
|
],
|
|
"sourceStatus": "Local on/once/emit/off structurally correspond to the fixed tiny-emitter 2.1.0 reference; recovered 3.5.31 declared ^2.1.0. Exact original copied revision is unknown. This migration adds types while preserving the local class and dispatch behavior. Subsequent reviewed fixes use own event keys/data descriptors and once-per-registration consumption across nested snapshots, preserving ordinary dispatch behavior.",
|
|
"licenseStatus": "Full pinned upstream MIT notice verified in package, all standalone bundles and actual installed candidate tarball. Repeat on changed release candidates; original copy revision remains unknown.",
|
|
"upstreamSources": [
|
|
"https://raw.githubusercontent.com/scottcorgan/tiny-emitter/2.1.0/index.js",
|
|
"https://raw.githubusercontent.com/scottcorgan/tiny-emitter/2.1.0/LICENSE",
|
|
"https://raw.githubusercontent.com/scottcorgan/tiny-emitter/2.1.0/package.json"
|
|
],
|
|
"upstreamReviewedAt": "2026-09-13",
|
|
"updatePolicy": "Keep attribution and pinned upstream comparison. Review observable dispatch changes independently from type migration; run upstream/historical/candidate parity tests and validate all bundle and packed notices.",
|
|
"fingerprints": [
|
|
{
|
|
"path": "packages/artplayer-tool-thumbnail/src/emitter.ts",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "a083e029dd1104912d3e9a0ba23a6dcc160d9ccde6a55be40db74367a647a3cb"
|
|
}
|
|
],
|
|
"reviewEvidence": [
|
|
"refactor/baselines/thumbnail-vendor/sources.json",
|
|
"test/thumbnail-runtime.test.js",
|
|
"test/thumbnail-vendor.test.js",
|
|
"refactor/changes/2026-09-13-PKG-TOOL-THUMB-04-runtime-types.md",
|
|
"refactor/changes/2026-09-13-PKG-TOOL-THUMB-04-public-types.md",
|
|
"refactor/baselines/thumbnail-public-types-validation.json",
|
|
"refactor/changes/2026-09-13-PKG-TOOL-THUMB-04-emitter.md",
|
|
"refactor/baselines/thumbnail-emitter-validation.json"
|
|
]
|
|
},
|
|
{
|
|
"id": "chromecast-cast-icon",
|
|
"riskId": "VENDOR-10",
|
|
"inputs": [
|
|
"packages/artplayer-plugin-chromecast/src/cast.svg",
|
|
"packages/artplayer-plugin-chromecast/src/controller.ts"
|
|
],
|
|
"owners": [
|
|
"PKG-CAST-03",
|
|
"PKG-CAST-06"
|
|
],
|
|
"sourceStatus": "Former commercial SVG removed. Current cast.svg is an original geometric icon authored for this repository during PKG-CAST-03; controller imports that file directly.",
|
|
"licenseStatus": "Current original repository artwork follows the package MIT license; no entitlement in or relicensing of the removed Font Awesome Pro artwork is asserted.",
|
|
"updatePolicy": "Keep original artwork and custom icon/wrapper support; review any replacement provenance and verify actual rebuilt/shipped assets. Historical commercial-source evidence remains immutable. CAST04 refreshes the controller fingerprint only for type imports/return annotation; six rebuilt/copied JavaScript files are byte-identical to CAST03.",
|
|
"fingerprints": [
|
|
{
|
|
"path": "packages/artplayer-plugin-chromecast/src/cast.svg",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "48470d66b5874569c54d66889b0ec62c33bf809670d4baf2eded2bfa83d6d726"
|
|
},
|
|
{
|
|
"path": "packages/artplayer-plugin-chromecast/src/controller.ts",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "1bf55c5a6a4a83290ee591d4286452acd7ba0b27d01e4b6293e16d61772655c2"
|
|
}
|
|
],
|
|
"reviewEvidence": [
|
|
"refactor/baselines/chromecast-release.json",
|
|
"refactor/changes/2026-09-13-PKG-CAST-01-contracts.md",
|
|
"refactor/changes/2026-09-13-PKG-CAST-03-runtime.md",
|
|
"refactor/baselines/chromecast-runtime-validation.json",
|
|
"refactor/changes/2026-09-13-PKG-CAST-04-types.md",
|
|
"refactor/baselines/chromecast-types-validation.json"
|
|
]
|
|
}
|
|
],
|
|
"integrations": [
|
|
{
|
|
"id": "hls.js",
|
|
"riskId": "SDK-01",
|
|
"owners": [
|
|
"PKG-HLS-05",
|
|
"EX-03"
|
|
],
|
|
"sourceFiles": [
|
|
"packages/artplayer-plugin-hls-control/src/index.ts",
|
|
"packages/artplayer-plugin-hls-control/src/mapping.ts",
|
|
"packages/artplayer-plugin-hls-control/src/menu.ts",
|
|
"packages/artplayer-plugin-hls-control/src/sdk-events.ts",
|
|
"docs/assets/example/hls.control.js"
|
|
],
|
|
"contract": "Caller supplies art.hls; homepage demo loads hls.js 1.5.17. Preserve quality/audio selectors and old core integration.",
|
|
"validationStatus": "PKG-HLS-SDK-01 tests pinned Hls.js 1.5.17/1.7.2 with native workers, grouped audio, replacement and detach/reattach across published/current core on desktop MSE engines. Inputs remain test-only archives. Windows WebKit lacks MSE; Safari/native, physical devices, external networks, full SDK types/version range and isolated installation remain HLS-05/06 and EX-03. One Firefox grouped teardown target crash remains unexplained (HLS-CRASH-01); passing subsequent runs are not closure evidence and SDK task remains doing.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json"
|
|
},
|
|
{
|
|
"id": "dash.js",
|
|
"riskId": "SDK-02",
|
|
"owners": [
|
|
"PKG-DASH-01",
|
|
"PKG-DASH-05",
|
|
"EX-03"
|
|
],
|
|
"sourceFiles": [
|
|
"packages/artplayer-plugin-dash-control/src/index.ts",
|
|
"docs/assets/example/dash.control.js",
|
|
"refactor/baselines/dash-sdk.json",
|
|
"test/browser/dash-sdk.spec.js",
|
|
"refactor/baselines/dash-type-dependencies.json",
|
|
"refactor/scripts/dash-sdk-types.test.mjs"
|
|
],
|
|
"contract": "Caller owns art.dash. Candidate adapts the released 4.x quality method surface and workspace 5.x stable representation ID surface. Controlled contracts and DOM validation pass; actual pinned 4.5.2/5.2.1 SDK media remains PKG-DASH-05.",
|
|
"validationStatus": "Pinned npm SDK 4.5.2/5.2.1 main/legacy media, automatic state refresh, same-SDK source replacement, settings selection and formatter recovery exercised. DASH-SEEK-01 is isolated to SDK 4 stale buffer metrics in its empty-clear branch using native playback and a diagnostic SDK 5 backport; no production mitigation ships and the risk remains open (refactor/baselines/dash-seek-diagnosis.json). Windows WebKit MSE, devices and full distribution remain incomplete. Actual SDK declarations and peer closure retain the ten-configuration matrix and upstream-only Node10/old DOM limits.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json"
|
|
},
|
|
{
|
|
"id": "flv.js",
|
|
"riskId": "SDK-03",
|
|
"owners": [
|
|
"EX-03"
|
|
],
|
|
"sourceFiles": [
|
|
"docs/assets/example/flv.js"
|
|
],
|
|
"contract": "Demo dependency flv.js 1.6.2; customType playback/teardown must be tested with actual SDK.",
|
|
"validationStatus": "Source integration observed; complete real SDK/service/device matrix not yet verified.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json"
|
|
},
|
|
{
|
|
"id": "mpegts.js",
|
|
"riskId": "SDK-04",
|
|
"owners": [
|
|
"EX-03"
|
|
],
|
|
"sourceFiles": [
|
|
"docs/assets/example/mpegts.js"
|
|
],
|
|
"contract": "Demo dependency mpegts.js 1.7.3; actual codec/stream/browser support remains unverified.",
|
|
"validationStatus": "Source integration observed; complete real SDK/service/device matrix not yet verified.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json"
|
|
},
|
|
{
|
|
"id": "webtorrent",
|
|
"riskId": "SDK-05",
|
|
"owners": [
|
|
"EX-03"
|
|
],
|
|
"sourceFiles": [
|
|
"docs/assets/example/webtorrent.js"
|
|
],
|
|
"contract": "Demo URL uses webtorrent@1, a moving major selector; preserve caller integration and explicitly capture actual runtime version.",
|
|
"validationStatus": "Source integration observed; complete real SDK/service/device matrix not yet verified.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json"
|
|
},
|
|
{
|
|
"id": "google-cast",
|
|
"riskId": "SDK-06",
|
|
"owners": [
|
|
"PKG-CAST-01",
|
|
"PKG-CAST-05"
|
|
],
|
|
"sourceFiles": [
|
|
"packages/artplayer-plugin-chromecast/src/sdk.ts",
|
|
"packages/artplayer-plugin-chromecast/src/controller.ts",
|
|
"packages/artplayer-plugin-chromecast/src/media.ts"
|
|
],
|
|
"contract": "Default remote cast_sender.js?loadCastFramework=1; sdk URL/options and actual Cast device/session behavior require separate validation.",
|
|
"validationStatus": "Controlled SDK regression and native browser DOM/core tests verified source/main/legacy behavior in CAST03. No actual SDK bytes/version, HTTPS sender, physical receiver, discovery or receiver media networking acceptance; CAST05 remains outstanding.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json"
|
|
},
|
|
{
|
|
"id": "ima-via-glomex",
|
|
"riskId": "SDK-07",
|
|
"owners": [
|
|
"PKG-VAST-01",
|
|
"PKG-VAST-05"
|
|
],
|
|
"sourceFiles": [
|
|
"packages/artplayer-plugin-vast/src/index.ts",
|
|
"packages/artplayer-plugin-vast/src/sdk.ts",
|
|
"packages/artplayer-plugin-vast/src/session.ts"
|
|
],
|
|
"contract": "@glomex/vast-ima-player loadImaSdk loads external IMA; preserve event/content/ad state and teardown, do not equate mocks with vendor service acceptance.",
|
|
"validationStatus": "Source integration observed; complete real SDK/service/device matrix not yet verified.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json"
|
|
},
|
|
{
|
|
"id": "mediapipe-tensorflow",
|
|
"riskId": "SDK-08",
|
|
"owners": [
|
|
"PKG-MASK-01",
|
|
"PKG-MASK-05",
|
|
"PKG-MASK-06"
|
|
],
|
|
"sourceFiles": [
|
|
"packages/artplayer-plugin-danmuku-mask/src/index.ts",
|
|
"packages/artplayer-plugin-danmuku-mask/src/config.ts",
|
|
"packages/artplayer-plugin-danmuku-mask/src/sdk.ts",
|
|
"packages/artplayer-plugin-danmuku-mask/src/controller.ts",
|
|
"packages/artplayer-plugin-danmuku-mask/src/output.ts"
|
|
],
|
|
"contract": "Npm dependency versions are separate from unversioned solutionPath CDN assets; keep option override, backend fallback, model result disposal and masks.",
|
|
"validationStatus": "MASK01 verified two actual releases, six frozen Yarn/installed SDK versions, adapter source hashes and 12 existing demo resource byte matches. The default solutionPath remains an unversioned CDN. Controlled export/default/pixel probes do not establish real models, fallback, browser/GPU cleanup or notice completeness; MASK05/06 remain open.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json",
|
|
"reviewEvidence": [
|
|
"refactor/baselines/danmuku-mask-contract.md",
|
|
"refactor/baselines/danmuku-mask-contract-validation.json",
|
|
"refactor/baselines/danmuku-mask-release.json"
|
|
]
|
|
},
|
|
{
|
|
"id": "jassub-worker-wasm-fonts",
|
|
"riskId": "SDK-09",
|
|
"owners": [
|
|
"PKG-JASSUB-01",
|
|
"PKG-JASSUB-05"
|
|
],
|
|
"sourceFiles": [
|
|
"packages/artplayer-plugin-jassub/src/index.ts",
|
|
"docs/assets/example/jassub.js"
|
|
],
|
|
"contract": "Preserve options pass-through, result.instance and worker/wasm/font URLs. Wrapper, worker and WASM must be a verified compatible set.",
|
|
"validationStatus": "Source integration observed; complete real SDK/service/device matrix not yet verified.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json"
|
|
},
|
|
{
|
|
"id": "mediabunny",
|
|
"riskId": "SDK-10",
|
|
"owners": [
|
|
"PKG-MB-01",
|
|
"PKG-MB-09"
|
|
],
|
|
"sourceFiles": [
|
|
"packages/artplayer-proxy-mediabunny/src/input.ts",
|
|
"packages/artplayer-proxy-mediabunny/src/media.ts",
|
|
"packages/artplayer-proxy-mediabunny/src/tracks.ts",
|
|
"packages/artplayer-proxy-mediabunny/src/hls-state.ts",
|
|
"packages/artplayer-proxy-mediabunny/src/preflight.ts",
|
|
"packages/artplayer-proxy-mediabunny/src/load-session.ts",
|
|
"packages/artplayer-proxy-mediabunny/package.json"
|
|
],
|
|
"contract": "Preserve native-video-like events, HLS input and topology, codec capability failures and AV sync; actual library/codec environment still requires verification.",
|
|
"validationStatus": "PKG-MB-01 verifies actual 1.0.0/1.2.0 archives and installed 1.56.1 MPL-2.0 provenance, recorded in mb-release.json and mb-contract.md. Historical embedded SDK version is unknown; notices are MB-LICENSE-01/MB-10. Native codec, SDK media and AV sync remain MB-02/09. MB-02 freezes actual native input behavior; MB-03 candidate has 72 browser checks including 12 candidate plays and nine native pending-stream cancellations, six strict TS modules and a build-only WebCodecs 0.1.19 resolution. Full AV sync/decoder cleanup and release notices remain MB-04/05/06/09/10.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json"
|
|
},
|
|
{
|
|
"id": "asr-caller-service",
|
|
"riskId": "SDK-11",
|
|
"owners": [
|
|
"PKG-ASR-01",
|
|
"PKG-ASR-05",
|
|
"EX-03"
|
|
],
|
|
"sourceFiles": [
|
|
"packages/artplayer-plugin-asr/src/index.ts",
|
|
"docs/assets/example/asr.js",
|
|
"docs/assets/example/asr.local.js"
|
|
],
|
|
"contract": "Core plugin supplies PCM to caller onAudioChunk. Example fetches an external ASR endpoint and opens its returned WebSocket; not an embedded ASR SDK or a verified service.",
|
|
"validationStatus": "Native PCM/Worklet, volume, CORS and lifecycle verified on Chromium/Firefox with candidate and published cores. Explicit capture has native Firefox zero-binding external ownership; default fallback still uses controlled rejection there. Offline demo remains local audio only. Default CORS silence, Windows WebKit, physical devices and the external recognition service remain unverified or restricted.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json"
|
|
},
|
|
{
|
|
"id": "option-validator",
|
|
"riskId": "SDK-12",
|
|
"owners": [
|
|
"CORE-01",
|
|
"CORE-07"
|
|
],
|
|
"sourceFiles": [
|
|
"packages/artplayer/src/index.ts",
|
|
"packages/artplayer/src/option/resolve.ts"
|
|
],
|
|
"contract": "Bundled validation dependency; preserve validation/default/merge behavior and failure cleanup when typing constructor boundaries.",
|
|
"validationStatus": "Source integration observed; complete real SDK/service/device matrix not yet verified.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json"
|
|
}
|
|
]
|
|
}
|