Marks wp-showhide as it shipped before the consistency programme began:

    a1a0ee216ab49507a92657c4474e4f656bbde3fb 2025-11-28
    Use esc_html() to fix XSS

Everything after this commit is the rewrite to the shared standard in
github.com/lesterchan/wordpress-plugins, _standards/STANDARDS.md.