@kieransimkin/dancemoves 3.1.14 → 3.1.15
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/docs/wordpress-org.md +11 -0
- package/lib/build-manifest.json +5 -5
- package/lib/dancemoves.min.js +1 -1
- package/lib/index.cjs +1 -1
- package/lib/index.mjs +1 -1
- package/lib/wordpress.js +1 -1
- package/package.json +2 -2
- package/readme.txt +51 -0
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
# WordPress.org publication
|
|
2
|
+
|
|
3
|
+
Run the official Plugin Check against the exact production ZIP with the intended directory slug. Do not scan tests as installed runtime code, ignore an entire category or treat a passing static scan as a security audit. Review all warnings and document each contextual finding. Keep the readme stable tag, main PHP version and GitHub release aligned. After directory approval, publish the same verified source through the assigned SVN repository; verify the downloaded directory ZIP independently. No directory password belongs in source.
|
|
4
|
+
|
|
5
|
+
## Potential problems
|
|
6
|
+
|
|
7
|
+
On 8 October 2026 the official checker found missing directory readme fields and source-domain/output warnings. The complete report is retained privately by the release operator. WordPress common-issues guidance requires matching stable versions, GPL-compatible declarations and source links for compiled code. Source: https://developer.wordpress.org/plugins/wordpress-org/common-issues/ (accessed 8 October 2026).
|
|
8
|
+
|
|
9
|
+
The MP3 download uses a canonical, signed uploads path and direct binary streaming; WP_Filesystem does not supply an equivalent bounded download stream. This exception is annotated at the exact operation rather than hidden by broad exclusions.
|
|
10
|
+
|
|
11
|
+
The retained `ks_epk_*` functions and `KS_EPK_*` constants are plugin-specific compatibility names used by existing integrations. Renaming them solely to match the directory slug would break those integrations. The BPM and effect input warnings do not recognise the typed sanitizers: after nonce, autosave and capability checks, BPM must be finite and within 20–400; effects must match the implemented allowlist. No raw value is persisted. Keep these warnings visible and re-review affected handlers when they change.
|
package/lib/build-manifest.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"schema": "dancemoves-library-build/v1",
|
|
3
3
|
"name": "@kieransimkin/dancemoves",
|
|
4
|
-
"version": "3.1.
|
|
4
|
+
"version": "3.1.15",
|
|
5
5
|
"homepage": "https://kieransimkin.co.uk/my-songs/",
|
|
6
6
|
"files": [
|
|
7
7
|
{
|
|
@@ -32,12 +32,12 @@
|
|
|
32
32
|
{
|
|
33
33
|
"path": "dancemoves.min.js",
|
|
34
34
|
"bytes": 184408,
|
|
35
|
-
"sha256": "
|
|
35
|
+
"sha256": "d33235a69ca602eb3ec726bb8642f29a0b2535439d886814371273f7adf4cfe7"
|
|
36
36
|
},
|
|
37
37
|
{
|
|
38
38
|
"path": "index.cjs",
|
|
39
39
|
"bytes": 309993,
|
|
40
|
-
"sha256": "
|
|
40
|
+
"sha256": "cdc2e7faed4a27b2480046c8a292a9200bd88a86ad996181821bc1876af74d3b"
|
|
41
41
|
},
|
|
42
42
|
{
|
|
43
43
|
"path": "index.d.ts",
|
|
@@ -47,7 +47,7 @@
|
|
|
47
47
|
{
|
|
48
48
|
"path": "index.mjs",
|
|
49
49
|
"bytes": 308909,
|
|
50
|
-
"sha256": "
|
|
50
|
+
"sha256": "a2217aa54f464a1db5837c469822d4ee5d12f5ca1ba077a9b1047d1699175036"
|
|
51
51
|
},
|
|
52
52
|
{
|
|
53
53
|
"path": "react.cjs",
|
|
@@ -107,7 +107,7 @@
|
|
|
107
107
|
{
|
|
108
108
|
"path": "wordpress.js",
|
|
109
109
|
"bytes": 183218,
|
|
110
|
-
"sha256": "
|
|
110
|
+
"sha256": "87e81e857bc8d7f5233368873d3efb82e45c5b469600ec54f2d4b21d8e029c84"
|
|
111
111
|
}
|
|
112
112
|
]
|
|
113
113
|
}
|