mirror of
https://github.com/zhw2590582/ArtPlayer.git
synced 2026-10-08 19:06:15 -08:00
1397 lines
65 KiB
JSON
1397 lines
65 KiB
JSON
{
|
|
"schemaVersion": 1,
|
|
"task": "BASE-07",
|
|
"sourceCommit": "e01f39ff",
|
|
"capturedAt": "2026-09-10T12:58:34.266Z",
|
|
"note": "Maintained provenance inventory. Unknown versions/licenses remain open. No complete legal, security or runtime audit is claimed; remote services were not invoked. Fingerprints cover selected copied assets, not every repository media file.",
|
|
"packages": [
|
|
{
|
|
"name": "artplayer",
|
|
"declaredRuntimeDependencies": {
|
|
"option-validator": "^2.0.6"
|
|
},
|
|
"resolvedRuntimeDependencies": [
|
|
{
|
|
"name": "option-validator",
|
|
"range": "^2.0.6",
|
|
"lockedVersion": "2.0.6",
|
|
"installedVersion": "2.0.6",
|
|
"manifestLicense": "MIT",
|
|
"licenseEvidence": "Installed package manifest claim; bundled notice and transitive/license review remain with the owning package."
|
|
}
|
|
],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-ads",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-ambilight",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-asr",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-audio-track",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-auto-thumbnail",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-chapter",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-chromecast",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-danmuku",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-danmuku-mask",
|
|
"declaredRuntimeDependencies": {
|
|
"@mediapipe/selfie_segmentation": "^0.1.1675465747",
|
|
"@tensorflow-models/body-segmentation": "^1.0.2",
|
|
"@tensorflow/tfjs-backend-cpu": "^4.21.0",
|
|
"@tensorflow/tfjs-backend-webgl": "^4.21.0",
|
|
"@tensorflow/tfjs-converter": "^4.21.0",
|
|
"@tensorflow/tfjs-core": "^4.21.0"
|
|
},
|
|
"resolvedRuntimeDependencies": [
|
|
{
|
|
"name": "@mediapipe/selfie_segmentation",
|
|
"range": "^0.1.1675465747",
|
|
"lockedVersion": "0.1.1675465747",
|
|
"installedVersion": "0.1.1675465747",
|
|
"manifestLicense": "Apache-2.0",
|
|
"licenseEvidence": "Installed package manifest claim; bundled notice and transitive/license review remain with the owning package."
|
|
},
|
|
{
|
|
"name": "@tensorflow-models/body-segmentation",
|
|
"range": "^1.0.2",
|
|
"lockedVersion": "1.0.2",
|
|
"installedVersion": "1.0.2",
|
|
"manifestLicense": "Apache-2.0",
|
|
"licenseEvidence": "Installed package manifest claim; bundled notice and transitive/license review remain with the owning package."
|
|
},
|
|
{
|
|
"name": "@tensorflow/tfjs-backend-cpu",
|
|
"range": "^4.21.0",
|
|
"lockedVersion": "4.22.0",
|
|
"installedVersion": "4.22.0",
|
|
"manifestLicense": "Apache-2.0",
|
|
"licenseEvidence": "Installed package manifest claim; bundled notice and transitive/license review remain with the owning package."
|
|
},
|
|
{
|
|
"name": "@tensorflow/tfjs-backend-webgl",
|
|
"range": "^4.21.0",
|
|
"lockedVersion": "4.22.0",
|
|
"installedVersion": "4.22.0",
|
|
"manifestLicense": "Apache-2.0",
|
|
"licenseEvidence": "Installed package manifest claim; bundled notice and transitive/license review remain with the owning package."
|
|
},
|
|
{
|
|
"name": "@tensorflow/tfjs-converter",
|
|
"range": "^4.21.0",
|
|
"lockedVersion": "4.22.0",
|
|
"installedVersion": "4.22.0",
|
|
"manifestLicense": "Apache-2.0",
|
|
"licenseEvidence": "Installed package manifest claim; bundled notice and transitive/license review remain with the owning package."
|
|
},
|
|
{
|
|
"name": "@tensorflow/tfjs-core",
|
|
"range": "^4.21.0",
|
|
"lockedVersion": "4.22.0",
|
|
"installedVersion": "4.22.0",
|
|
"manifestLicense": "Apache-2.0",
|
|
"licenseEvidence": "Installed package manifest claim; bundled notice and transitive/license review remain with the owning package."
|
|
}
|
|
],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-dash-control",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-document-pip",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-hls-control",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-jassub",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-multiple-subtitles",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-vast",
|
|
"declaredRuntimeDependencies": {
|
|
"@alugha/ima": "2.1.0",
|
|
"@glomex/vast-ima-player": "^1.21.2"
|
|
},
|
|
"resolvedRuntimeDependencies": [
|
|
{
|
|
"name": "@glomex/vast-ima-player",
|
|
"range": "^1.21.2",
|
|
"lockedVersion": "1.21.2",
|
|
"installedVersion": "1.21.2",
|
|
"manifestLicense": "Apache-2.0",
|
|
"licenseEvidence": "Installed package manifest claim; bundled notice and transitive/license review remain with the owning package."
|
|
},
|
|
{
|
|
"name": "@alugha/ima",
|
|
"range": "2.1.0",
|
|
"lockedVersion": "2.1.0",
|
|
"installedVersion": "2.1.0",
|
|
"manifestLicense": "MIT",
|
|
"licenseEvidence": "Installed package manifest and LICENSE.md; direct dependency supplies the public declaration chain referenced by Glomex."
|
|
}
|
|
],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-plugin-vtt-thumbnail",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-proxy-canvas",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-proxy-mediabunny",
|
|
"declaredRuntimeDependencies": {
|
|
"mediabunny": "^1.43.1"
|
|
},
|
|
"resolvedRuntimeDependencies": [
|
|
{
|
|
"name": "mediabunny",
|
|
"range": "^1.43.1",
|
|
"lockedVersion": "1.56.1",
|
|
"installedVersion": "1.56.1",
|
|
"manifestLicense": "MPL-2.0",
|
|
"licenseEvidence": "Installed package manifest claim; bundled notice and transitive/license review remain with the owning package."
|
|
}
|
|
],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-tool-iframe",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-tool-thumbnail",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {}
|
|
},
|
|
{
|
|
"name": "artplayer-vitepress",
|
|
"declaredRuntimeDependencies": {},
|
|
"resolvedRuntimeDependencies": [],
|
|
"developmentDependencies": {
|
|
"flexsearch": "0.8.158",
|
|
"markdown-it": "14.1.0",
|
|
"vitepress": "1.6.3",
|
|
"vitepress-plugin-search": "1.0.4-alpha.22",
|
|
"vue": "3.5.13"
|
|
}
|
|
}
|
|
],
|
|
"vendored": [
|
|
{
|
|
"id": "screenfull",
|
|
"riskId": "VENDOR-01",
|
|
"inputs": [
|
|
"packages/artplayer/src/libs/screenfull.js"
|
|
],
|
|
"owners": [
|
|
"CORE-12"
|
|
],
|
|
"sourceStatus": "Fixed v6.0.2 comparison reference with four verified local adaptations; original acquisition tag is not recorded. Runtime file unchanged.",
|
|
"licenseStatus": "Pinned upstream MIT notice included verbatim in actual core tarball and all three standalone bundle headers; verified in CORE-12. Local copied implementation unchanged.",
|
|
"upstreamSources": [
|
|
"https://raw.githubusercontent.com/sindresorhus/screenfull/v6.0.2/index.js",
|
|
"https://raw.githubusercontent.com/sindresorhus/screenfull/v6.0.2/license"
|
|
],
|
|
"upstreamReviewedAt": "2026-09-11",
|
|
"updatePolicy": "Keep separate from owned TS migration. Verify source/version/diff and license notices before replacement; preserve API/CSS/worker URLs and run owning package tests.",
|
|
"fingerprints": [
|
|
{
|
|
"path": "packages/artplayer/src/libs/screenfull.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "2332b50c0c6364d5c99080be0f5739255e4b9e465d2cca40f761adce9a1908f8"
|
|
}
|
|
],
|
|
"reviewEvidence": [
|
|
"refactor/changes/2026-09-11-CORE-12-template-resources.md",
|
|
"refactor/baselines/core-vendor/sources.json",
|
|
"refactor/scripts/core-vendor.mjs",
|
|
"test/core-vendor.test.js",
|
|
"refactor/baselines/template-resources-validation.json"
|
|
]
|
|
},
|
|
{
|
|
"id": "hint.css",
|
|
"riskId": "VENDOR-02",
|
|
"inputs": [
|
|
"packages/artplayer/src/style/hint.less"
|
|
],
|
|
"owners": [
|
|
"CORE-12"
|
|
],
|
|
"sourceStatus": "Header identifies v2.7.0; full normalized CSS comparison verifies ArtPlayer scoping, font-style and default color adaptations. Runtime file unchanged.",
|
|
"licenseStatus": "Pinned upstream MIT notice included verbatim in actual core tarball and all three standalone bundle headers; verified in CORE-12. Local copied implementation unchanged.",
|
|
"upstreamSources": [
|
|
"https://raw.githubusercontent.com/chinchang/hint.css/v2.7.0/hint.css",
|
|
"https://raw.githubusercontent.com/chinchang/hint.css/v2.7.0/LICENSE"
|
|
],
|
|
"upstreamReviewedAt": "2026-09-11",
|
|
"updatePolicy": "Keep separate from owned TS migration. Verify source/version/diff and license notices before replacement; preserve API/CSS/worker URLs and run owning package tests.",
|
|
"fingerprints": [
|
|
{
|
|
"path": "packages/artplayer/src/style/hint.less",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "e2dc4940e6b212d8da75a404fd5ff1ad894008457677bc37554c6b64b735bc31"
|
|
}
|
|
],
|
|
"reviewEvidence": [
|
|
"refactor/changes/2026-09-11-CORE-12-template-resources.md",
|
|
"refactor/baselines/core-vendor/sources.json",
|
|
"refactor/scripts/core-vendor.mjs",
|
|
"test/core-vendor.test.js",
|
|
"refactor/baselines/template-resources-validation.json"
|
|
]
|
|
},
|
|
{
|
|
"id": "webvtt-parser",
|
|
"riskId": "VENDOR-03",
|
|
"inputs": [
|
|
"packages/artplayer-plugin-multiple-subtitles/src/parser.js"
|
|
],
|
|
"owners": [
|
|
"PKG-MULTI-SUB-01"
|
|
],
|
|
"sourceStatus": "Pinned 380cfcce34ba8b472d3a31474874eb72a0e5f460 comparison reference; exact normalized executable body matches local ESM and historical shipped IIFE adaptations. Historical acquisition revision remains unknown.",
|
|
"licenseStatus": "Complete pinned CC0 dedication retained in package notices and actual tarball/standalone main, legacy and ESM banners.",
|
|
"upstreamSources": [
|
|
"https://raw.githubusercontent.com/w3c/webvtt.js/380cfcce34ba8b472d3a31474874eb72a0e5f460/parser.js",
|
|
"https://raw.githubusercontent.com/w3c/webvtt.js/380cfcce34ba8b472d3a31474874eb72a0e5f460/LICENSE.md",
|
|
"https://raw.githubusercontent.com/w3c/webvtt.js/380cfcce34ba8b472d3a31474874eb72a0e5f460/package.json"
|
|
],
|
|
"upstreamReviewedAt": "2026-09-13",
|
|
"updatePolicy": "Keep separate from owned TS migration. Verify source/version/diff and license notices before replacement; preserve API/CSS/worker URLs and run owning package tests.",
|
|
"fingerprints": [
|
|
{
|
|
"path": "packages/artplayer-plugin-multiple-subtitles/src/parser.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "ba582074d57fa2d72880e6e4253fe14646787916b2b68e2a1e748e685cf96ab1"
|
|
}
|
|
],
|
|
"verificationEvidence": [
|
|
"refactor/changes/2026-09-13-PKG-MULTI-SUB-01-contract.md",
|
|
"refactor/baselines/multiple-subtitles-contract-validation.json",
|
|
"refactor/baselines/multiple-subtitles-vendor/sources.json",
|
|
"refactor/scripts/multiple-subtitles-vendor.mjs",
|
|
"test/multiple-subtitles-vendor.test.js",
|
|
"packages/artplayer-plugin-multiple-subtitles/THIRD_PARTY_NOTICES"
|
|
]
|
|
},
|
|
{
|
|
"id": "jassub-code-and-workers",
|
|
"riskId": "VENDOR-04",
|
|
"inputs": [
|
|
"packages/artplayer-plugin-jassub/src/jassub.es.js",
|
|
"packages/artplayer-plugin-jassub/worker",
|
|
"docs/assets/jassub/jassub-worker.js",
|
|
"docs/assets/jassub/jassub-worker.wasm",
|
|
"docs/assets/jassub/jassub-worker-modern.wasm"
|
|
],
|
|
"owners": [
|
|
"PKG-JASSUB-01",
|
|
"PKG-JASSUB-06",
|
|
"PKG-JASSUB-07",
|
|
"PKG-JASSUB-08",
|
|
"PKG-JASSUB-09"
|
|
],
|
|
"sourceStatus": "Original wrapper matched npm 1.8.8; PKG-JASSUB-07 now carries an explicitly recorded local lifecycle/clock/query patch (baselines/jassub-vendor-patch.json). Worker JS is unchanged. Both WASM binaries still exactly match Pages nightly 747e392d7f6fe7c38bbcdfe05c9ada46b0b62daf/source 6b19a04ddfbad8f9bfd3237395788dd76218841b. Original wrapper hash, unchanged binaries/fonts, pinned build and submodules remain separately recorded; no independent WASM rebuild.",
|
|
"licenseStatus": "Matching source LICENSE and nightly COPYRIGHT identified and byte-verified; full component notice assembly, LGPL source/distribution review and full FreeType license remain PKG-JASSUB-06 gates. VENDOR-04 remains open.",
|
|
"upstreamSources": [
|
|
"https://github.com/ThaUnknown/jassub/blob/main/LICENSE",
|
|
"https://registry.npmjs.org/jassub/-/jassub-1.8.8.tgz",
|
|
"https://github.com/ThaUnknown/jassub/tree/25d1ea7ca1f827dbed2c8ea539c9bc917ccbfab1",
|
|
"https://github.com/ThaUnknown/jassub/tree/6b19a04ddfbad8f9bfd3237395788dd76218841b",
|
|
"https://github.com/ThaUnknown/jassub/commit/747e392d7f6fe7c38bbcdfe05c9ada46b0b62daf"
|
|
],
|
|
"upstreamReviewedAt": "2026-09-14",
|
|
"updatePolicy": "Keep separate from owned TS migration. Verify source/version/diff and license notices before replacement; preserve API/CSS/worker URLs and run owning package tests.",
|
|
"fingerprints": [
|
|
{
|
|
"path": "docs/assets/jassub/jassub-worker-modern.wasm",
|
|
"algorithm": "sha256",
|
|
"sha256": "8a8b37463713d1f2ddbc1fbb8a35889d9565e5a6670851758b46b2216d8e513c"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/jassub-worker.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "0fb9a83f96fc39426e733a94f3e7fe4e37099324c08328450ba032b653e85707"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/jassub-worker.wasm",
|
|
"algorithm": "sha256",
|
|
"sha256": "73880d99ba9260ac39fc4476491cf254ca784c76f3af2fb03f3f9be8065ad3c0"
|
|
},
|
|
{
|
|
"path": "packages/artplayer-plugin-jassub/src/jassub.es.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "ebabca473edfbe7f9768dba25b2c2403f2c9c5dec64292fa008d8eb758e32696"
|
|
},
|
|
{
|
|
"path": "packages/artplayer-plugin-jassub/worker/jassub-worker-modern.wasm",
|
|
"algorithm": "sha256",
|
|
"sha256": "8a8b37463713d1f2ddbc1fbb8a35889d9565e5a6670851758b46b2216d8e513c"
|
|
},
|
|
{
|
|
"path": "packages/artplayer-plugin-jassub/worker/jassub-worker.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "0fb9a83f96fc39426e733a94f3e7fe4e37099324c08328450ba032b653e85707"
|
|
},
|
|
{
|
|
"path": "packages/artplayer-plugin-jassub/worker/jassub-worker.wasm",
|
|
"algorithm": "sha256",
|
|
"sha256": "73880d99ba9260ac39fc4476491cf254ca784c76f3af2fb03f3f9be8065ad3c0"
|
|
}
|
|
],
|
|
"localPatch": {
|
|
"task": "PKG-JASSUB-07",
|
|
"record": "refactor/baselines/jassub-vendor-patch.json",
|
|
"originalSha256LF": "b973508ade00b5b9cea2f299d49f4943003372729be7350b6938e44fddb32038",
|
|
"patchedSha256LF": "1fdcf24d206e8711348dddcb5fe7b656007a9b1d81a992bb497c6d10bd0a2cdb",
|
|
"followUp": "refactor/baselines/jassub-offscreen-patch.json",
|
|
"followUps": [
|
|
"refactor/baselines/jassub-offscreen-patch.json",
|
|
"refactor/baselines/jassub-hybrid-patch.json",
|
|
"refactor/baselines/jassub-render-patch.json"
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"id": "jassub-font-assets",
|
|
"riskId": "VENDOR-05",
|
|
"inputs": [
|
|
"docs/assets/jassub/default.woff2",
|
|
"docs/assets/jassub/fonts"
|
|
],
|
|
"owners": [
|
|
"PKG-JASSUB-01",
|
|
"SITE-01",
|
|
"PKG-JASSUB-06",
|
|
"SITE-07"
|
|
],
|
|
"sourceStatus": "All 11 unique fonts and default alias exactly match historical upstream Pages blobs. Original acquisition/redistribution permissions are not established by that identity. See baselines/jassub-provenance.json.",
|
|
"licenseStatus": "Complete upstream notice references now ship for Liberation, Averia Sans, Lato and exact-author CHAWP. Three references retain font-table differences; Serif Simple and six unclear font permissions remain unresolved. See site-font-notices-provenance.json; VENDOR-05 stays open.",
|
|
"upstreamSources": [
|
|
"https://github.com/ThaUnknown/jassub/tree/25d1ea7ca1f827dbed2c8ea539c9bc917ccbfab1",
|
|
"https://github.com/liberationfonts/liberation-fonts/files/2926169/liberation-fonts-ttf-2.00.5.tar.gz",
|
|
"https://github.com/google/fonts/blob/0f81bc90462b862dbfe3d16403ff284a68473833/ofl/averiasanslibre/AveriaSansLibre-Light.ttf",
|
|
"https://github.com/google/fonts/blob/f3b885d5590e307e02542f1a724cec55d567fdaa/ofl/lato/Lato-Regular.ttf",
|
|
"https://github.com/awp/chawp/blob/3c4f6317bebd6783c8d0db3bc9206aa62d602f90/chawp.otf"
|
|
],
|
|
"upstreamReviewedAt": "2026-09-15",
|
|
"updatePolicy": "Keep separate from owned TS migration. Verify source/version/diff and license notices before replacement; preserve API/CSS/worker URLs and run owning package tests.",
|
|
"fingerprints": [
|
|
{
|
|
"path": "docs/assets/jassub/default.woff2",
|
|
"algorithm": "sha256",
|
|
"sha256": "886929903707c5bb28b07cd2eed69921b3d5ef5c49c73a0dd1e187ebf6546a4c"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/fonts/Averia Sans Libre Light.ttf",
|
|
"algorithm": "sha256",
|
|
"sha256": "df4ca526f9a941afda1f9c5a275695beb066a531f5b008c1e28ddc2c5f6e4390"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/fonts/Averia Serif Simple Light.ttf",
|
|
"algorithm": "sha256",
|
|
"sha256": "fb6398238298a7010920e1c216f7b29bc920477bc810f8bcc677ae4e6f411b4b"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/fonts/FRABK.TTF",
|
|
"algorithm": "sha256",
|
|
"sha256": "9ad3d0e5ef31c4a9a98cb0e169e4e625286aa34c712add3e001c0100138730d4"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/fonts/Gramond.ttf",
|
|
"algorithm": "sha256",
|
|
"sha256": "072859788bc577d35df2e852225c52cc5670339a4859d86b5edb96b1724a2177"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/fonts/Lato-Regular.ttf",
|
|
"algorithm": "sha256",
|
|
"sha256": "6f6940be0835c3ddec9199e5fc42be4cbc61ebcfd58c623fdf719366253f1780"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/fonts/SlatePro-Medium.otf",
|
|
"algorithm": "sha256",
|
|
"sha256": "56aa0fc2878bf782c10e5bba6dc45de1982a572d14ba9e10cd9d5a4414b6171e"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/fonts/allison-script.regular.otf",
|
|
"algorithm": "sha256",
|
|
"sha256": "97cd66bb6f89bdd32af2a9592f439536c85aa7553516514e2623bb1e81c65bd6"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/fonts/architext.regular.ttf",
|
|
"algorithm": "sha256",
|
|
"sha256": "a6b8e33ce190ee9c871590b982cff37e137b303bb73dcab55ef3ff7154ba143a"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/fonts/arial.ttf",
|
|
"algorithm": "sha256",
|
|
"sha256": "c9b76220a5be42ead4733611e417cd65c5fd8aeaa33eb56576ac378a37d130a1"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/fonts/chawp.otf",
|
|
"algorithm": "sha256",
|
|
"sha256": "9107241585a4328ce1438dfeabbfb1a8d0cd513dab6902be9a1a5774eab607c6"
|
|
},
|
|
{
|
|
"path": "docs/assets/jassub/fonts/default.woff2",
|
|
"algorithm": "sha256",
|
|
"sha256": "886929903707c5bb28b07cd2eed69921b3d5ef5c49c73a0dd1e187ebf6546a4c"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "monaco-static-assets",
|
|
"riskId": "VENDOR-06",
|
|
"inputs": [
|
|
"docs/assets/js/vs"
|
|
],
|
|
"owners": [
|
|
"SITE-01",
|
|
"SITE-05"
|
|
],
|
|
"sourceStatus": "Monaco 0.30.1 verified against official npm archive: 98 byte-exact files, one CSS newline-only difference. The bundled font additionally matches @vscode/codicons 0.0.26 exactly; see site-codicons-provenance.json.",
|
|
"licenseStatus": "Full Monaco root notices and Codicons historical notices are delivered. The actual TypeScript 4.4.4 worker is exactly reproduced and has a complete original LICENSE/CopyrightNotice/ThirdPartyNoticeText supplement plus attribution; the original stale 2.7.2 label is preserved with explanation. Other bundled-component completeness remains under VENDOR-06. No permission for unrelated fonts/media is inferred. CSS/HTML/JSON worker source proof now binds seven service packages to nine original license/third-party notice files, two embedded formatter headers and attribution. JSON glob BSD conditions and actual formatter author years are retained; all 81 site notices pass HTTP byte checks. Mode/core/basic-language and remaining embedded-source completeness stay open. All four language mode bundles are now exactly reproduced and the two shared npm dependencies are bound to those mode assets as well as workers. Core/basic-language and remaining upstream-origin review stay open. DOM adaptation supplement now delivers fixed WinJS4.4.5 reference terms and explicit unknown-original-version attribution; six fixed VS Code declaration blocks match the original source map.88 notice files plus index are served; remaining provenance is not waived. Unicode data supplement now delivers fixed historical Unicode terms and mixed-draft/input attribution; three original recipes reproduce all four selected expressions. Current notice delivery is 90 files plus index; remaining provenance is not waived.",
|
|
"upstreamSources": [
|
|
"https://registry.npmjs.org/monaco-editor/-/monaco-editor-0.30.1.tgz",
|
|
"https://registry.npmjs.org/@vscode/codicons/-/codicons-0.0.26.tgz",
|
|
"https://github.com/winjs/winjs/tree/4329b1133b243d9ded3b5a1f98d096ee8e80e889",
|
|
"https://github.com/alexdima/unicode-utils/tree/6d37cf4362203bfb5431c560cd8809b2cc3b51c1",
|
|
"https://github.com/unicode-org/unicodetools/blob/b1c21ef7e972ea0c783c19cf25494bde645fbf21/LICENSE"
|
|
],
|
|
"upstreamReviewedAt": "2026-09-15",
|
|
"updatePolicy": "Keep separate from owned TS migration. Verify source/version/diff and license notices before replacement; preserve API/CSS/worker URLs and run owning package tests.",
|
|
"fingerprints": [
|
|
{
|
|
"path": "docs/assets/js/vs/base/browser/ui/codicons/codicon/codicon.ttf",
|
|
"algorithm": "sha256",
|
|
"sha256": "ff6b888d65cfd8077d49c6c704c1bfc8f2ce1ed71db9c583c63e0a49f046c79c"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/base/worker/workerMain.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "3ebdb68f45f9fed1c587901c9db42dd70e8a552421e330f39116fc7b078ba67e"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/abap/abap.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "49638217243bab4ed7d928d194bafe334abb614777440bf46f8636b9e5dfe0a4"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/apex/apex.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "034f340001e4c340b80e18abe45c990564931c4a061b4e74de86c012fb7d7a21"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/azcli/azcli.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "be50c776891279c9717db0d48a20d6d99f07cb60d2d8d279422fa917826683cf"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/bat/bat.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "3ec5d66f73ee7e7dc2b43db5999a768d1a54e933de9f507015fe7709a184adee"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/bicep/bicep.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "59d02b8930e36e2cbc3e472e263f881a82d84da292a79faf1d379cb060a2d7e1"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/cameligo/cameligo.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "f93cd405c71f97f26b4739f7f917b242e82a993ad42884422a43bf27d5b413e2"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/clojure/clojure.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "9e99cf86bcfb25c1b33bac9e26e11e4646868fa753356c7d737cfb24b7b1e49c"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/coffee/coffee.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "90d6aae23c9f5e4f335df5cb57634fa0193a102629deb88b98f238b4025f0551"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/cpp/cpp.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "ece3d119688eaf8a37fffae388118b12f8724ac2c3c8ff10d44caf2e91026424"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/csharp/csharp.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "d6367d0d67c0612cf37d25319e00cda2e4e38869a3c3200b1bfcd856cfe7fb4b"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/csp/csp.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "01241c709a7dddc0b5cedffb6dcf913a5d95c826eb68e2c27f114640719af7df"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/css/css.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "1f8468a126f6bfdc43d49a75e0ae758de913ebf55e685165adb6d069a454de5c"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/dart/dart.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "6b410bbe17b8ebcaed969bdfcf8049df6fe863482756ae73d2aebb919630034c"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/dockerfile/dockerfile.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "315769a72a2877f8ddddf9497a2e7e259e8df51cc38232ddf76fbe4556c0d7cd"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/ecl/ecl.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "fc412fe18e564cff17e9a0bcd5674ba15c49f4739417cf589ce1c546b21033a9"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/elixir/elixir.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "130d310090d723f51111d573000a72aa26fe44c9d79e6d04d12524e6631cfb6b"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/flow9/flow9.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "fafd88d973aed314454cd7d842b270125553f7a7613bb068c3c799a21ac61b64"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/fsharp/fsharp.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "32027afd4be75ddeca6c7beb9b52eda07d59afe3ea39a84f0696a6b3d074dcbf"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/go/go.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "c93466a4479ee8aa5e3ec70a89b469db1277b801d1551d40ad700d5abd367363"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/graphql/graphql.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "60a8825e939ca81540eb6ac00b17867b3e55af97bff99a9fa40c422a4281bdcf"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/handlebars/handlebars.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "5a174247aa64c7a064fc977365bb1c7161b4c97e559a6121773188c25df9d9a2"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/hcl/hcl.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "6053e90b8aa918c9744f41dcb1c0e58229a4946f0968a39b00776c3893538f54"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/html/html.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "6e7ae0ce7f07ec01c64db1368869715c115690e40fb5c183d5ced0d2716038bd"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/ini/ini.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "ecdb5c36a38a8b68af6384789c380d0e28b5b3df86de9c3419d348e688b8810e"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/java/java.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "8fd9c491b67dfa9ab831ed71a3973cc6ffc840f438f41114a794163672f4cf9c"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/javascript/javascript.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "bbd7fb1b714d347704eae4c74cb36c352876864f2103a69af3965f32c1c982c6"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/julia/julia.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "ef3783cbb81cee25697c0bddc9476813b593fb64712c21bc60099c8109c748f0"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/kotlin/kotlin.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "31b082803acb08622aa2dd736dca42772f6a0d3224fdb7c0e9c3e1f17800ca32"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/less/less.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "5ba9296cc5c6a7699028ac6e263631eb9284f80bfbffe99a4429f6c85dfc0589"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/lexon/lexon.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "2be27259788a7a4a6fb94a59150b47d169ef6e04933f76977e568c4cb0227f57"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/liquid/liquid.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "f4454c09b7e66ab2ffd81451aef2f12c79c0011839e19bcdb0fce42928acce6b"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/lua/lua.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "f39154e727c8d3df5c70ecab1737c0a07df3011977288ba4adc7d25c8ef639b5"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/m3/m3.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "a3b616444441f34b90b4e06a6a3a845f2804da67220c19721b9461140eb7f074"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/markdown/markdown.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "47ae9f567af2e69e682d14703bf4ad5428708464edb3d30791f3255a2863a52e"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/mips/mips.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "fcc6104a8c7092794744a1472511cd348d585d1cba0421e61e5eb8e0c58af186"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/msdax/msdax.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "f98e43f6600e629bfc354196006a02f9f9cc26480de064cc480e3bc885beb283"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/mysql/mysql.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "1cafe5b6c81234fc6680a421dd6290ec590ce03b9e525eacb0936a78ab50aeae"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/objective-c/objective-c.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "7cfdb8b492b6f1c5a1d83fefc3bd349bb1acdd489516534aefacd553c2850e75"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/pascal/pascal.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "f2886264f5ad42d173ef18e8ea961f674090be7513f48af95dcef4eb1191cac3"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/pascaligo/pascaligo.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "3d3317429e0837f6960e33829a2c2fd62119ca1514ad735f62345da8fd1dd817"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/perl/perl.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "317b527f0ade315a7cb066eac72672e5f2ba6d0c02c6014be052c32fb6566aed"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/pgsql/pgsql.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "f58b4ab8529e311f7f98f690ed39e13de22f3ae29cc8916bf99c21ac86917970"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/php/php.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "3d7d187fb2e3b959adfda7b7557ccda4b6f690f838babc525cabffbe0dda7dd0"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/pla/pla.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "6138b0b0a1be95370c00afe6eca5022ea10e8b0f11f1db9382163f28975373e6"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/postiats/postiats.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "5b18eac81236e88ffca2e67e527fa1d6fb42f53a4df42c1fbeb37312a9ec2fe4"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/powerquery/powerquery.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "fb9705793a687b03fe08605f19c3f1019d83cf06394a8381db541bda92e230d4"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/powershell/powershell.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "b80339b4a8450fd3a5bb5bf3817fb1b67fe6202690fc1ce97ef22336bcd7053b"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/protobuf/protobuf.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "18f13fbd6b421023eec480901e48354d249bc9c3dce9d0e0cc842cbab4393fd3"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/pug/pug.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "dbce9bb879b84cf3bf8bd05643a4d3d2ae6ded03b4a9234a0e8d2ebfab6ade44"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/python/python.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "b0c9cb9c96d3b289b4ee1bb6ca921e810d87ec2967ebaf8608d5570865ac6524"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/qsharp/qsharp.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "6cf9e660e8082f7a8dff4e8041c58c5e9fed1e622e0301b359886a5148c15327"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/r/r.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "889684005db07d8b2e8c6f17d54b7bbf1bd67ad948b0b9ca411c2e55ba3433dd"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/razor/razor.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "da07ee116d392fbf97f5adc9d4f1fd46e5bbbe9765949c8cb9a6f6a4917ce6cb"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/redis/redis.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "286518ee6a7e76356149bebfbcdc19d2d30c19a5fa48d4bfcbf2f7a946783bd0"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/redshift/redshift.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "8b865d41e76c227f3e1eb3bc74f8e9cf24627b449cc94164c803c1e515a9bbfd"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/restructuredtext/restructuredtext.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "32c72e9b8fa318289b628efee24bc5b573e3f74f8ab7dd544dead1b3545fc351"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/ruby/ruby.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "93a9fbda62d9b4ef5537de37d7b4c77a89d8e2b0a2193dddac534ce98da47b5f"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/rust/rust.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "6352c16af73494a44e09b5ccad8a61c0369933d94881fcf58a7e8a75a27315cf"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/sb/sb.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "7323046d28f72e54b5abda684d4ec67d55b688a0b5e1d23ffe1d675c1c141b69"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/scala/scala.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "57309bc0e00edda2c4edb5fd255e042e1ef6ce8d51f51c7e822a74268e04f444"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/scheme/scheme.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "3fe89a5618aa1c4eafa5c65aad212fcf2ba34e302de73df7db0867ba01dbd866"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/scss/scss.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "b01dfbdbd787642ed55a3ca7b0b89b2edb80e4aa486d89fee0ba748124dad4f9"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/shell/shell.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "39063f662fa62eb543e5d8f9b792b31d14c484abafd9a67943dae52fc9f5ce36"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/solidity/solidity.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "e25859bb2a1babe193f03028489c95296b1bfe98a92dcb450d4c539661b5a86d"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/sophia/sophia.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "4ba061aa0beb82ba64efeb6bd1128da0d3445ac8cfc26d3f4591c66df0fa4bb0"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/sparql/sparql.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "162783ddf2dd67384d379ebf485f6ed0cafd820e892e4d89e82c8ba8617390c4"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/sql/sql.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "3b1decbf86cb0b163070cc144e826f104ba10468798b36e6d0e64257a35fd1f8"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/st/st.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "b3ac35684d5668c2d08105cec31f43e8d897e4ab94103d8bd64ac804d256c20c"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/swift/swift.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "288a0ad2974e332bb873bacbb2a284f8f39cdc7d12b1fd5e3c46699147a63633"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/systemverilog/systemverilog.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "40b18f15d29e3201142eb02fd5cc5ad690b32386bbe5dc0a874fd68a2f176f41"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/tcl/tcl.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "317b63a872ce538d4eef5dae701641670fd3f99dfc0439465d444b2992b69bea"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/twig/twig.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "c3442379367d5ef43f1377a14e3c6a04ec451dabb05bed200571ea6dc328dfa0"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/typescript/typescript.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "25dd318efd5aada375fdf391c488bd0b5ec0d665ba16e49f1e7968217ad01139"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/vb/vb.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "41d3d863c8b955c53eddb8724866a487d3632995114c77c0e9bc416227d148bf"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/xml/xml.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "95ddef452d5ff87f5c9f807d56f3f74964727677b5a55baa13a0a4870e2ae850"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/basic-languages/yaml/yaml.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "a6ffa854247873af58df3ad550bbdd474b2d8dbc1d1c730fce4e44dfcb5f9b62"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.css",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "6240d544d93236ac40dd3bd1ee49afbd27cb43e056c24c04a0c2cb37f1fd4587"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "05a50ed50bb013b6e7a82d25686186aa7bdff8b8209c7badab00e046b5e99618"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.nls.de.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "e31a518baf29ffce15a27ac80a6b5406ebf21c76657f3344f46c9ac0e6d0c202"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.nls.es.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "f86887a1575bc71f035e92eb68b3d4e8c4e351d93f3b98520660933fed984007"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.nls.fr.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "673214777e1ba3518abe1bbde8b5250cb18d65257054c8adf9cb5e1e49918d27"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.nls.it.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "66df8e46d4aa40b5393489efda7e8aee5ad5589fdf68fef03832e665f0aabc9c"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.nls.ja.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "4688d4dfa1ddf91cbfa7005e1110b12f79315706e7d56463c96e8bc688a3d60d"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.nls.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "4d4915b0ff284b77938d3be70b9000911554fc451263a7baa594d199ef170a0e"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.nls.ko.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "a6d39e2202fa271bfd5e04b83a5265bbe7ef73a945471c9e9fcb65ff8f1a8663"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.nls.ru.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "345850b05cc97c0c1978df43ee996a32da7cd33ba1a85be3b6958884a8307040"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.nls.zh-cn.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "30ce784d1733d424e221009e097760b813e629d63579bddb62f7a4f229b9011f"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/editor/editor.main.nls.zh-tw.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "ab5c148283e9afd0577afb5e522e45c6c2b323a0a12215b71f92155fbf003b74"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/language/css/cssMode.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "c0f3a99395d07b421ef75f6eb78389c6ef29477f6a05556f9b94e2bb918dd6c1"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/language/css/cssWorker.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "073e09f9301dcf147e40ef675e3f18d8cc29de9f49673ec8d17711569144552d"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/language/html/htmlMode.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "91f7b295ddc3b0b679c669b84865f3ace79fdd30bfcd814f2960c06f3e24d600"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/language/html/htmlWorker.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "0b14f0af7ae7ab85732574fb384496dae3e85d28f953188cc842eec468a8a457"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/language/json/jsonMode.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "9abacb664dcd8564f28ef004465da0f4b3c551b2741424bf42e61c0a26e61adb"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/language/json/jsonWorker.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "0eb929c56d44afddb3030c011913010311ce34e5eadb1129a3ce9cbafd4c771d"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/language/typescript/tsMode.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "35d94edaf7982c8b59c95cda38c5ebffcf93479ee91a5c9820b9bf60719351c2"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/language/typescript/tsWorker.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "95d7d318d3b6076692705bda50f69ccf2981aae6b06f240de5ac642f32970bf4"
|
|
},
|
|
{
|
|
"path": "docs/assets/js/vs/loader.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "be92515f6d2cbfc75cd240076246e8ccf6f698269c0402e367d2ee371655bbeb"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "vconsole",
|
|
"riskId": "VENDOR-07",
|
|
"inputs": [
|
|
"docs/assets/js/vconsole.min.js",
|
|
"scripts/site-vendor/vconsole/upstream.js"
|
|
],
|
|
"owners": [
|
|
"SITE-01",
|
|
"SITE-07",
|
|
"SITE-VCONSOLE-01"
|
|
],
|
|
"sourceStatus": "Exact 282381-byte reconstruction of npm 3.15.0 from commit 05d80398bae35e793774f74e3c052b4e530e293a and its frozen npm lockfile; 326 untruncated module records establish eight runtime package dependencies and webpack bootstrap. ArtPlayer retains the separate reviewed lifecycle patch.",
|
|
"licenseStatus": "Original vConsole LICENSE retained; missing referenced MIT text supplied separately with explicit attribution. All nine runtime-component notices are preserved in full, including both mutation-observer BSD notices. Actual HTTP delivery and fingerprints verified; see vconsole-notices-provenance/validation.json.",
|
|
"upstreamSources": [
|
|
"https://registry.npmjs.org/vconsole/-/vconsole-3.15.0.tgz",
|
|
"https://github.com/Tencent/vConsole/tree/05d80398bae35e793774f74e3c052b4e530e293a",
|
|
"https://opensource.org/license/mit"
|
|
],
|
|
"upstreamReviewedAt": "2026-09-15",
|
|
"updatePolicy": "Keep separate from owned TS migration. Verify source/version/diff and license notices before replacement; preserve API/CSS/worker URLs and run owning package tests.",
|
|
"fingerprints": [
|
|
{
|
|
"path": "docs/assets/js/vconsole.min.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "3d1b8c3aff5f415ccf3bdc3cdcec6e01cff5b4c64d4558c078ca33d003f616ac"
|
|
},
|
|
{
|
|
"path": "scripts/site-vendor/vconsole/upstream.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "671f47427e1e3048919147c765e9fb71e4ea40d79a8c2829089f499d3e9b9bf4"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "console-bundle",
|
|
"riskId": "VENDOR-08",
|
|
"inputs": [
|
|
"docs/assets/js/console.js"
|
|
],
|
|
"owners": [
|
|
"SITE-01"
|
|
],
|
|
"sourceStatus": "Frozen original 340306-byte Parcel bundle e00bbf82bf08c452825690372ded39a9b60f4baf438f0e7ce8300e9bc4629c03 has 102 modules. SITE-CONSOLE-01 replaces only owned Focm/W5CS bodies and removes the missing map trailer. All 100 retained vendor bodies and Parcel loader exactly reproduce from 32 official runtime archives, Babel standalone 7.16.4, Terser 3.17.0 and Parcel 1.12.5 recipes; all package edges verified. This establishes exact source identities, not the original full lockfile or uniquely installed versions.",
|
|
"licenseStatus": "All currently identified component notices are preserved and delivered: 44 components, 47 files. Component associations are checked against fixed upstream provenance. VENDOR-08 accepted-with-scope; see refactor/console-notice-review.md for retained original-build limitations and CC BY-SA material boundaries. Never describe the entire bundle as MIT-only or treat this as publication clearance.",
|
|
"upstreamSources": [
|
|
"https://registry.npmjs.org/console-feed/-/console-feed-3.2.2.tgz",
|
|
"https://registry.npmjs.org/terser/-/terser-3.17.0.tgz",
|
|
"https://registry.npmjs.org/parcel-bundler/-/parcel-bundler-1.12.5.tgz",
|
|
"https://registry.npmjs.org/react/-/react-17.0.2.tgz",
|
|
"https://registry.npmjs.org/react-dom/-/react-dom-17.0.2.tgz",
|
|
"https://registry.npmjs.org/scheduler/-/scheduler-0.20.2.tgz",
|
|
"https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz",
|
|
"https://registry.npmjs.org/react-is/-/react-is-16.13.1.tgz",
|
|
"https://registry.npmjs.org/prop-types/-/prop-types-15.7.2.tgz",
|
|
"https://registry.npmjs.org/shallowequal/-/shallowequal-1.1.0.tgz",
|
|
"https://registry.npmjs.org/process/-/process-0.11.10.tgz",
|
|
"https://registry.npmjs.org/hoist-non-react-statics/-/hoist-non-react-statics-3.3.2.tgz",
|
|
"https://registry.npmjs.org/is-dom/-/is-dom-1.1.0.tgz",
|
|
"https://registry.npmjs.org/is-object/-/is-object-1.0.2.tgz",
|
|
"https://registry.npmjs.org/is-window/-/is-window-1.0.2.tgz",
|
|
"https://registry.npmjs.org/linkifyjs/-/linkifyjs-2.1.9.tgz",
|
|
"https://registry.npmjs.org/@emotion/core/-/core-10.3.0.tgz",
|
|
"https://registry.npmjs.org/@emotion/css/-/css-10.0.27.tgz",
|
|
"https://registry.npmjs.org/@emotion/cache/-/cache-10.0.29.tgz",
|
|
"https://registry.npmjs.org/@emotion/styled/-/styled-10.0.27.tgz",
|
|
"https://registry.npmjs.org/@emotion/styled-base/-/styled-base-10.3.0.tgz",
|
|
"https://registry.npmjs.org/emotion-theming/-/emotion-theming-10.3.0.tgz",
|
|
"https://registry.npmjs.org/styled-components/-/styled-components-5.3.3.tgz",
|
|
"https://registry.npmjs.org/@babel/runtime/-/runtime-7.16.3.tgz",
|
|
"https://registry.npmjs.org/@emotion/sheet/-/sheet-0.9.4.tgz",
|
|
"https://registry.npmjs.org/@emotion/stylis/-/stylis-0.8.5.tgz",
|
|
"https://registry.npmjs.org/@emotion/weak-memoize/-/weak-memoize-0.2.5.tgz",
|
|
"https://registry.npmjs.org/@emotion/utils/-/utils-0.11.3.tgz",
|
|
"https://registry.npmjs.org/@emotion/hash/-/hash-0.8.0.tgz",
|
|
"https://registry.npmjs.org/@emotion/unitless/-/unitless-0.7.5.tgz",
|
|
"https://registry.npmjs.org/@emotion/memoize/-/memoize-0.7.4.tgz",
|
|
"https://registry.npmjs.org/@emotion/serialize/-/serialize-0.11.16.tgz",
|
|
"https://registry.npmjs.org/@emotion/is-prop-valid/-/is-prop-valid-0.8.8.tgz",
|
|
"https://registry.npmjs.org/react-inspector/-/react-inspector-5.1.1.tgz",
|
|
"https://registry.npmjs.org/@babel/standalone/-/standalone-7.16.4.tgz",
|
|
"https://raw.githubusercontent.com/styled-components/styled-components/9b3457036cfedf1d5336f654f3171657630a9fd8/LICENSE"
|
|
],
|
|
"upstreamReviewedAt": "2026-09-15T00:26:56.484Z",
|
|
"updatePolicy": "Keep separate from owned TS migration. Verify source/version/diff and license notices before replacement; preserve API/CSS/worker URLs and run owning package tests.",
|
|
"fingerprints": [
|
|
{
|
|
"path": "docs/assets/js/console.js",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "a5f1388175fd885c03dd21b35fff97dca0b548745588dfca3172579a96537163"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"id": "thumbnail-tiny-emitter",
|
|
"riskId": "VENDOR-09",
|
|
"inputs": [
|
|
"packages/artplayer-tool-thumbnail/src/emitter.ts"
|
|
],
|
|
"owners": [
|
|
"PKG-TOOL-THUMB-04",
|
|
"PKG-TOOL-THUMB-06"
|
|
],
|
|
"sourceStatus": "Local on/once/emit/off structurally correspond to the fixed tiny-emitter 2.1.0 reference; recovered 3.5.31 declared ^2.1.0. Exact original copied revision is unknown. This migration adds types while preserving the local class and dispatch behavior. Subsequent reviewed fixes use own event keys/data descriptors and once-per-registration consumption across nested snapshots, preserving ordinary dispatch behavior.",
|
|
"licenseStatus": "Full pinned upstream MIT notice verified in package, all standalone bundles and actual installed candidate tarball. Repeat on changed release candidates; original copy revision remains unknown.",
|
|
"upstreamSources": [
|
|
"https://raw.githubusercontent.com/scottcorgan/tiny-emitter/2.1.0/index.js",
|
|
"https://raw.githubusercontent.com/scottcorgan/tiny-emitter/2.1.0/LICENSE",
|
|
"https://raw.githubusercontent.com/scottcorgan/tiny-emitter/2.1.0/package.json"
|
|
],
|
|
"upstreamReviewedAt": "2026-09-13",
|
|
"updatePolicy": "Keep attribution and pinned upstream comparison. Review observable dispatch changes independently from type migration; run upstream/historical/candidate parity tests and validate all bundle and packed notices.",
|
|
"fingerprints": [
|
|
{
|
|
"path": "packages/artplayer-tool-thumbnail/src/emitter.ts",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "a083e029dd1104912d3e9a0ba23a6dcc160d9ccde6a55be40db74367a647a3cb"
|
|
}
|
|
],
|
|
"reviewEvidence": [
|
|
"refactor/baselines/thumbnail-vendor/sources.json",
|
|
"test/thumbnail-runtime.test.js",
|
|
"test/thumbnail-vendor.test.js",
|
|
"refactor/changes/2026-09-13-PKG-TOOL-THUMB-04-runtime-types.md",
|
|
"refactor/changes/2026-09-13-PKG-TOOL-THUMB-04-public-types.md",
|
|
"refactor/baselines/thumbnail-public-types-validation.json",
|
|
"refactor/changes/2026-09-13-PKG-TOOL-THUMB-04-emitter.md",
|
|
"refactor/baselines/thumbnail-emitter-validation.json"
|
|
]
|
|
},
|
|
{
|
|
"id": "chromecast-cast-icon",
|
|
"riskId": "VENDOR-10",
|
|
"inputs": [
|
|
"packages/artplayer-plugin-chromecast/src/cast.svg",
|
|
"packages/artplayer-plugin-chromecast/src/controller.ts"
|
|
],
|
|
"owners": [
|
|
"PKG-CAST-03",
|
|
"PKG-CAST-06"
|
|
],
|
|
"sourceStatus": "Former commercial SVG removed. Current cast.svg is an original geometric icon authored for this repository during PKG-CAST-03; controller imports that file directly.",
|
|
"licenseStatus": "Current original repository artwork follows the package MIT license; no entitlement in or relicensing of the removed Font Awesome Pro artwork is asserted.",
|
|
"updatePolicy": "Keep original artwork and custom icon/wrapper support; review any replacement provenance and verify actual rebuilt/shipped assets. Historical commercial-source evidence remains immutable. CAST04 refreshes the controller fingerprint only for type imports/return annotation; six rebuilt/copied JavaScript files are byte-identical to CAST03.",
|
|
"fingerprints": [
|
|
{
|
|
"path": "packages/artplayer-plugin-chromecast/src/cast.svg",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "48470d66b5874569c54d66889b0ec62c33bf809670d4baf2eded2bfa83d6d726"
|
|
},
|
|
{
|
|
"path": "packages/artplayer-plugin-chromecast/src/controller.ts",
|
|
"algorithm": "sha256-lf",
|
|
"sha256": "1bf55c5a6a4a83290ee591d4286452acd7ba0b27d01e4b6293e16d61772655c2"
|
|
}
|
|
],
|
|
"reviewEvidence": [
|
|
"refactor/baselines/chromecast-release.json",
|
|
"refactor/changes/2026-09-13-PKG-CAST-01-contracts.md",
|
|
"refactor/changes/2026-09-13-PKG-CAST-03-runtime.md",
|
|
"refactor/baselines/chromecast-runtime-validation.json",
|
|
"refactor/changes/2026-09-13-PKG-CAST-04-types.md",
|
|
"refactor/baselines/chromecast-types-validation.json"
|
|
]
|
|
}
|
|
],
|
|
"integrations": [
|
|
{
|
|
"id": "hls.js",
|
|
"riskId": "SDK-01",
|
|
"owners": [
|
|
"PKG-HLS-05",
|
|
"EX-03"
|
|
],
|
|
"sourceFiles": [
|
|
"packages/artplayer-plugin-hls-control/src/index.ts",
|
|
"packages/artplayer-plugin-hls-control/src/mapping.ts",
|
|
"packages/artplayer-plugin-hls-control/src/menu.ts",
|
|
"packages/artplayer-plugin-hls-control/src/sdk-events.ts",
|
|
"docs/assets/example/hls.control.js"
|
|
],
|
|
"contract": "Caller supplies art.hls; homepage demo loads hls.js 1.5.17. Preserve quality/audio selectors and old core integration.",
|
|
"validationStatus": "PKG-HLS-SDK-01 tests pinned Hls.js 1.5.17/1.7.2 with native workers, grouped audio, replacement and detach/reattach across published/current core on desktop MSE engines. Inputs remain test-only archives. Windows WebKit lacks MSE; Safari/native, physical devices, external networks, full SDK types/version range and isolated installation remain HLS-05/06 and EX-03. One Firefox grouped teardown target crash remains unexplained (HLS-CRASH-01); passing subsequent runs are not closure evidence and SDK task remains doing.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json"
|
|
},
|
|
{
|
|
"id": "dash.js",
|
|
"riskId": "SDK-02",
|
|
"owners": [
|
|
"PKG-DASH-01",
|
|
"PKG-DASH-05",
|
|
"EX-03"
|
|
],
|
|
"sourceFiles": [
|
|
"packages/artplayer-plugin-dash-control/src/index.ts",
|
|
"docs/assets/example/dash.control.js",
|
|
"refactor/baselines/dash-sdk.json",
|
|
"test/browser/dash-sdk.spec.js",
|
|
"refactor/baselines/dash-type-dependencies.json",
|
|
"refactor/scripts/dash-sdk-types.test.mjs"
|
|
],
|
|
"contract": "Caller owns art.dash. Candidate adapts the released 4.x quality method surface and workspace 5.x stable representation ID surface. Controlled contracts and DOM validation pass; actual pinned 4.5.2/5.2.1 SDK media remains PKG-DASH-05.",
|
|
"validationStatus": "Pinned npm SDK 4.5.2/5.2.1 main/legacy media, automatic state refresh, same-SDK source replacement, settings selection and formatter recovery exercised. DASH-SEEK-01 is isolated to SDK 4 stale buffer metrics in its empty-clear branch using native playback and a diagnostic SDK 5 backport; no production mitigation ships and the risk remains open (refactor/baselines/dash-seek-diagnosis.json). Windows WebKit MSE, devices and full distribution remain incomplete. Actual SDK declarations and peer closure retain the ten-configuration matrix and upstream-only Node10/old DOM limits.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json"
|
|
},
|
|
{
|
|
"id": "flv.js",
|
|
"riskId": "SDK-03",
|
|
"owners": [
|
|
"EX-03"
|
|
],
|
|
"sourceFiles": [
|
|
"docs/assets/example/flv.js"
|
|
],
|
|
"contract": "Demo dependency flv.js 1.6.2; customType playback/teardown must be tested with actual SDK.",
|
|
"validationStatus": "Source integration observed; complete real SDK/service/device matrix not yet verified.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json"
|
|
},
|
|
{
|
|
"id": "mpegts.js",
|
|
"riskId": "SDK-04",
|
|
"owners": [
|
|
"EX-03"
|
|
],
|
|
"sourceFiles": [
|
|
"docs/assets/example/mpegts.js"
|
|
],
|
|
"contract": "Demo dependency mpegts.js 1.7.3; actual codec/stream/browser support remains unverified.",
|
|
"validationStatus": "Source integration observed; complete real SDK/service/device matrix not yet verified.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json"
|
|
},
|
|
{
|
|
"id": "webtorrent",
|
|
"riskId": "SDK-05",
|
|
"owners": [
|
|
"EX-03"
|
|
],
|
|
"sourceFiles": [
|
|
"docs/assets/example/webtorrent.js"
|
|
],
|
|
"contract": "Demo URL uses webtorrent@1, a moving major selector; preserve caller integration and explicitly capture actual runtime version.",
|
|
"validationStatus": "Source integration observed; complete real SDK/service/device matrix not yet verified.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json"
|
|
},
|
|
{
|
|
"id": "google-cast",
|
|
"riskId": "SDK-06",
|
|
"owners": [
|
|
"PKG-CAST-01",
|
|
"PKG-CAST-05"
|
|
],
|
|
"sourceFiles": [
|
|
"packages/artplayer-plugin-chromecast/src/sdk.ts",
|
|
"packages/artplayer-plugin-chromecast/src/controller.ts",
|
|
"packages/artplayer-plugin-chromecast/src/media.ts"
|
|
],
|
|
"contract": "Default remote cast_sender.js?loadCastFramework=1; sdk URL/options and actual Cast device/session behavior require separate validation.",
|
|
"validationStatus": "Controlled SDK regression and native browser DOM/core tests verified source/main/legacy behavior in CAST03. No actual SDK bytes/version, HTTPS sender, physical receiver, discovery or receiver media networking acceptance; CAST05 remains outstanding.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json"
|
|
},
|
|
{
|
|
"id": "ima-via-glomex",
|
|
"riskId": "SDK-07",
|
|
"owners": [
|
|
"PKG-VAST-01",
|
|
"PKG-VAST-05"
|
|
],
|
|
"sourceFiles": [
|
|
"packages/artplayer-plugin-vast/src/index.ts",
|
|
"packages/artplayer-plugin-vast/src/sdk.ts",
|
|
"packages/artplayer-plugin-vast/src/session.ts"
|
|
],
|
|
"contract": "@glomex/vast-ima-player loadImaSdk loads external IMA; preserve event/content/ad state and teardown, do not equate mocks with vendor service acceptance.",
|
|
"validationStatus": "Source integration observed; complete real SDK/service/device matrix not yet verified.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json"
|
|
},
|
|
{
|
|
"id": "mediapipe-tensorflow",
|
|
"riskId": "SDK-08",
|
|
"owners": [
|
|
"PKG-MASK-01",
|
|
"PKG-MASK-05",
|
|
"PKG-MASK-06"
|
|
],
|
|
"sourceFiles": [
|
|
"packages/artplayer-plugin-danmuku-mask/src/index.ts",
|
|
"packages/artplayer-plugin-danmuku-mask/src/config.ts",
|
|
"packages/artplayer-plugin-danmuku-mask/src/sdk.ts",
|
|
"packages/artplayer-plugin-danmuku-mask/src/controller.ts",
|
|
"packages/artplayer-plugin-danmuku-mask/src/output.ts"
|
|
],
|
|
"contract": "Npm dependency versions are separate from unversioned solutionPath CDN assets; keep option override, backend fallback, model result disposal and masks.",
|
|
"validationStatus": "MASK01 verified two actual releases, six frozen Yarn/installed SDK versions, adapter source hashes and 12 existing demo resource byte matches. The default solutionPath remains an unversioned CDN. Controlled export/default/pixel probes do not establish real models, fallback, browser/GPU cleanup or notice completeness; MASK05/06 remain open.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json",
|
|
"reviewEvidence": [
|
|
"refactor/baselines/danmuku-mask-contract.md",
|
|
"refactor/baselines/danmuku-mask-contract-validation.json",
|
|
"refactor/baselines/danmuku-mask-release.json"
|
|
]
|
|
},
|
|
{
|
|
"id": "jassub-worker-wasm-fonts",
|
|
"riskId": "SDK-09",
|
|
"owners": [
|
|
"PKG-JASSUB-01",
|
|
"PKG-JASSUB-05"
|
|
],
|
|
"sourceFiles": [
|
|
"packages/artplayer-plugin-jassub/src/index.ts",
|
|
"docs/assets/example/jassub.js"
|
|
],
|
|
"contract": "Preserve options pass-through, result.instance and worker/wasm/font URLs. Wrapper, worker and WASM must be a verified compatible set.",
|
|
"validationStatus": "Source integration observed; complete real SDK/service/device matrix not yet verified.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json"
|
|
},
|
|
{
|
|
"id": "mediabunny",
|
|
"riskId": "SDK-10",
|
|
"owners": [
|
|
"PKG-MB-01",
|
|
"PKG-MB-09"
|
|
],
|
|
"sourceFiles": [
|
|
"packages/artplayer-proxy-mediabunny/src/input.ts",
|
|
"packages/artplayer-proxy-mediabunny/src/media.ts",
|
|
"packages/artplayer-proxy-mediabunny/src/tracks.ts",
|
|
"packages/artplayer-proxy-mediabunny/src/hls-state.ts",
|
|
"packages/artplayer-proxy-mediabunny/src/preflight.ts",
|
|
"packages/artplayer-proxy-mediabunny/src/load-session.ts",
|
|
"packages/artplayer-proxy-mediabunny/package.json"
|
|
],
|
|
"contract": "Preserve native-video-like events, HLS input and topology, codec capability failures and AV sync; actual library/codec environment still requires verification.",
|
|
"validationStatus": "PKG-MB-01 verifies actual 1.0.0/1.2.0 archives and installed 1.56.1 MPL-2.0 provenance, recorded in mb-release.json and mb-contract.md. Historical embedded SDK version is unknown; notices are MB-LICENSE-01/MB-10. Native codec, SDK media and AV sync remain MB-02/09. MB-02 freezes actual native input behavior; MB-03 candidate has 72 browser checks including 12 candidate plays and nine native pending-stream cancellations, six strict TS modules and a build-only WebCodecs 0.1.19 resolution. Full AV sync/decoder cleanup and release notices remain MB-04/05/06/09/10.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json"
|
|
},
|
|
{
|
|
"id": "asr-caller-service",
|
|
"riskId": "SDK-11",
|
|
"owners": [
|
|
"PKG-ASR-01",
|
|
"PKG-ASR-05",
|
|
"EX-03"
|
|
],
|
|
"sourceFiles": [
|
|
"packages/artplayer-plugin-asr/src/index.ts",
|
|
"docs/assets/example/asr.js",
|
|
"docs/assets/example/asr.local.js"
|
|
],
|
|
"contract": "Core plugin supplies PCM to caller onAudioChunk. Example fetches an external ASR endpoint and opens its returned WebSocket; not an embedded ASR SDK or a verified service.",
|
|
"validationStatus": "Native PCM/Worklet, volume, CORS and lifecycle verified on Chromium/Firefox with candidate and published cores. Explicit capture has native Firefox zero-binding external ownership; default fallback still uses controlled rejection there. Offline demo remains local audio only. Default CORS silence, Windows WebKit, physical devices and the external recognition service remain unverified or restricted.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json"
|
|
},
|
|
{
|
|
"id": "option-validator",
|
|
"riskId": "SDK-12",
|
|
"owners": [
|
|
"CORE-01",
|
|
"CORE-07"
|
|
],
|
|
"sourceFiles": [
|
|
"packages/artplayer/src/index.ts",
|
|
"packages/artplayer/src/option/resolve.ts"
|
|
],
|
|
"contract": "Bundled validation dependency; preserve validation/default/merge behavior and failure cleanup when typing constructor boundaries.",
|
|
"validationStatus": "Source integration observed; complete real SDK/service/device matrix not yet verified.",
|
|
"demoPathsSource": "refactor/baselines/demo-inventory.json"
|
|
}
|
|
]
|
|
}
|