v0.9.4

@missing-elements/h5p-offline-player 0.9.4.

A library's own missing dependency no longer races the bundle on a host without Range

0.9.2 made the frame wait for the download when a library the package's own libraries need is missing. One path was still open. Sometimes the download finished just before the element's last check of whether the frame could start early. The element then started the frame on the worker's answer for the whole archive, before the final index had attached the libraries bundle. The runtime raced that attachment for the missing library and sometimes lost. The element raised error with code runtime: "Unexpected end of JSON input", or in Safari "The string did not match the expected pattern." In WebKit, 1 or 2 loads in 30 failed this way.

Now the frame starts early only when the worker says everything the runtime needs has arrived. Otherwise it starts after the final index.

Only the combination 0.9.2 described was affected: a host without Range, a package played with libraries, and a library asking for one the package doesn't carry. A content-only export, the usual case for libraries, wasn't affected.

Documentation

The README on npm now carries:

• a What it does section;
• the finished row as of runtime 0.2.3, which covers Interactive Book and Game Map;
• a link to a new guide, Packages you did not make. It covers what untrusted withholds, the content check and how it was compared with H5P's own validator, and how to handle a refused package.

The runtime stays at 0.2.3. On a CDN, update the player URL: h5p-offline-player@0.9.4. Embed 0.6.2 accepts 0.9.4, so a player domain gets the fix when its site is written again with 0.9.4 installed.

Full Changelog: v0.9.3...v0.9.4