REVIEWER SOURCE ARCHIVE — SLOPINO

This archive contains original readable JavaScript/CSS/HTML, both target manifests, all42 original native translation JSON files, generated locale files, icons and Python build tools. No minifier/bundler, remote executable code, npm or network download is needed. Do not treat source ZIP as a signed FirefoxXPI or ChromeCRX.

Reproduce locale output with Python3.12 or later:
  python3 compile_locales.py --require-all
Reproduce the owner-approved production target with `python3 package.py --production`: this fixes apiBase=https://slopino.com/api and accountURL=https://slopino.com/account, with CSP limited to that API. Reproduce the separate preview with `python3 package.py --preview`. Both commands produce Chromium and Firefox ZIPs. Preview configuration and final approved production configuration are intentionally distinct.

Compare each generated file against SOURCE-SHA256.json and the supplied target release hash report. Store reviewers should use the separately supplied exact reviewed upload ZIP, not invent an API origin. The source archive config.js may deliberately have null API until the operator approves the owned production origin; the package builder records the applied fixed target configuration.

No credentials, publisher keys, customer data, browser profiles, journals, provider state, downloaded vendor binaries or machine settings are included. The source format is platform-neutral; only Python standard library is required for catalogue compilation/package preparation. The submitted Firefox manifest declares its actual minimum browser version.

All brand assets originate from the included native SVG; no external font or image fetch is needed.
