You'll notice
Useful2 Signal1
Marketplace validation warns about symlinks and fully validates every plugin.json, not just its version.
What's wrong with this entry?
Anonymous. No account, no email.
What
Validation now warns when a marketplace file is a symlink or sits behind one, and validates each entry's plugin.json completely rather than only reading it to cross-check the version.
Details
- The file reader distinguishes absent, refused, too large and ok instead of collapsing everything into a failure.
- A missing file or a path component that is not a directory counts as absent; any other unexpected filesystem error is now surfaced rather than swallowed.
Evidence
is or traverses a symlink, so
Strings lifted out of the shipped bundle, so the claim above can be checked against them.