Select2 vendoring provenance (ADMIN-001 / t-00330)
===================================================

Bundled locally so ECAI_Admin::enqueue_admin_assets() never loads
executable JS/CSS from an external CDN, per WordPress.org plugin guidelines.

Package:          select2 (https://www.npmjs.com/package/select2)
Source registry:  https://registry.npmjs.org/select2
Upstream project: https://github.com/select2/select2
Version:          4.1.0 (pinned exact in package.json, no semver range)
License:          MIT (see LICENSE.txt alongside this file)
Vendored via:      npm install + bin/vendor-select2.sh (re-run on every
                   "npm run build" / release, see .github/workflows/release-wporg.yml)
Vendored at:       2026-08-15T21:03:02Z

Files and checksums (SHA-256)
------------------------------
admin/js/vendor/select2/select2.min.js    15692c266649fbc8acb4ebfb345e7e9499486d9551148241a235c9d62eea2f55
admin/css/vendor/select2/select2.min.css  5d5e14d587308b5d1ad79f51e9aea2f8f469b0a02b335f559f5a4bb756b81737

Re-run bin/vendor-select2.sh after bumping the pinned version in
package.json to refresh these files and this record. Verify with
bin/check-admin-vendor-assets.sh.
