A couple small fixes for Scratch.external (TurboWarp#2297)

- generate extension-dependencies.json with URLs in alphabetical order
to reduce chance of merge conflict in the future
- improve error tolerance for invalid extension-dependencies.json

Author: GarboMuffin

development/dependency-management.js

@@ -79,19 +79,34 @@ const removeDependency = (url) => {
  */
 const loadFromManifest = async () => {
   const text = await fsPromises.readFile(manifestPath, "utf-8");
-  const json = JSON.parse(text);
-  dependencies = json.dependencies;
+  try {
+    const json = JSON.parse(text);
+    if (typeof json.dependencies !== "object" || !json.dependencies) {
+      throw new Error(`.dependencies is not an object`);
+    }
+    dependencies = json.dependencies;
+  } catch (e) {
+    console.error("Failed to read dependencies - resetting to blank slate:", e);
+    dependencies = {};
+  }
 };
 
 /**
  * @returns {Promise<void>}
  */
 const saveToManifest = async () => {
+  // Save with the URLs in alphabetical order instead of the newest dependency always
+  // being at the very end.
+  const exportedDependencies = {};
+  for (const key of Object.keys(dependencies).sort()) {
+    exportedDependencies[key] = dependencies[key];
+  }
+
   await fsPromises.writeFile(
     manifestPath,
     JSON.stringify(
       {
-        dependencies,
+        dependencies: exportedDependencies,
       },
       null,
       2

extension-dependencies.json

@@ -4,18 +4,6 @@
       "sha256": "464efd192f197f1000ab60bedde235f349b8ee2967e1443cc3a29cebf42cbce2",
       "contentType": "application/javascript; charset=utf-8"
     },
-    "https://cdn.jsdelivr.net/npm/@tensorflow/tfjs-core@4.22.0/dist/tf-core.min.js": {
-      "sha256": "0924438788ff7da57b14d0f7c45a05d81611a5a4b52653da6d065e86d348757c",
-      "contentType": "application/javascript; charset=utf-8"
-    },
-    "https://cdn.jsdelivr.net/npm/@tensorflow/tfjs-backend-webgl@4.22.0/dist/tf-backend-webgl.min.js": {
-      "sha256": "b41fcbb4aee7721af0cc77ecfede60b44ad4ed6d5782a8392b84f774f4359a45",
-      "contentType": "application/javascript; charset=utf-8"
-    },
-    "https://cdn.jsdelivr.net/npm/@turbowarp/tensorflow-models-face-detection@1.0.3-tw1/dist/face-detection.min.js": {
-      "sha256": "3faf18f98df4270e0a945f2ad67d5ab6f43d6e625e0b3f2c3bcfcd1e6330ab57",
-      "contentType": "application/javascript; charset=utf-8"
-    },
     "https://cdn.jsdelivr.net/npm/@mediapipe/face_detection@0.4.1646425229/face_detection_short.binarypb": {
       "sha256": "771c6b632d5ba58a41d3160abfd80185a1d18081f52bcefc5baec9f3d10aa8d9",
       "contentType": "application/octet-stream"
@@ -31,6 +19,18 @@
     "https://cdn.jsdelivr.net/npm/@mediapipe/face_detection@0.4.1646425229/face_detection_solution_simd_wasm_bin.wasm": {
       "sha256": "ed927313be5ead0002008a7bc18177ecd342c60fd75795e4611fb44e19c4745b",
       "contentType": "application/wasm"
+    },
+    "https://cdn.jsdelivr.net/npm/@tensorflow/tfjs-backend-webgl@4.22.0/dist/tf-backend-webgl.min.js": {
+      "sha256": "b41fcbb4aee7721af0cc77ecfede60b44ad4ed6d5782a8392b84f774f4359a45",
+      "contentType": "application/javascript; charset=utf-8"
+    },
+    "https://cdn.jsdelivr.net/npm/@tensorflow/tfjs-core@4.22.0/dist/tf-core.min.js": {
+      "sha256": "0924438788ff7da57b14d0f7c45a05d81611a5a4b52653da6d065e86d348757c",
+      "contentType": "application/javascript; charset=utf-8"
+    },
+    "https://cdn.jsdelivr.net/npm/@turbowarp/tensorflow-models-face-detection@1.0.3-tw1/dist/face-detection.min.js": {
+      "sha256": "3faf18f98df4270e0a945f2ad67d5ab6f43d6e625e0b3f2c3bcfcd1e6330ab57",
+      "contentType": "application/javascript; charset=utf-8"
     }
   }
 }