Component · for humans & their agents
YouTube SEO Metadata Pack
verified · first-partyactively maintained$0 during beta (was $29)
YouTube truncates rather than rejecting, and the tag limit is a TOTAL character budget — everything past it is dropped entirely. The upload succeeds.
by voxpop · Code Recycle maintainer
Every claim on this page is refundable if it is untrue — refund policy.
Verified: 33 tests · 9/10 mutations caught
Validates a complete YouTube metadata set against the real published limits.
Validates a complete YouTube metadata set against the real published limits.
THE SILENT FAILURE. YouTube TRUNCATES rather than rejecting. A title over the limit is cut in search results. A description over the limit is cut. And the tag limit is a TOTAL character budget across ALL tags, not per tag — so everything past the budget is silently discarded, which almost nobody accounts for. Nothing errors. The upload succeeds. The creator never learns their last eleven tags were thrown away.
Every limit is cited to YouTube's own documentation in a comment beside the constant. Character counting is done in the unit the platform actually uses, and the choice is documented: naive .length counts UTF-16 code units, so an emoji costs two and an astral character can be cut in half.
Given a prioritised tag list and the total budget, it returns which tags fit AND NAMES the ones dropped. Silently returning a shorter list is the bug.
VERIFIED: 33 tests, 10 deliberate defects applied to the real source, 9 caught and 1 proved to change no observable behaviour (a boundary check whose case the emptiness fallback beside it already covers) — the proofs ship in mutations.json. Every mutation was observed FAILING before the source was restored — a test never seen to fail is a decoration.
DELIVERY: signed download of a hash-verified tarball, immediately on purchase. Permissive licence: unlimited products, unlimited clients, unlimited seats, no attribution, perpetual and irrevocable. One restriction, do not republish the source as source.
Interface
What you call, and what comes back. Types and signatures only — the implementation ships with the source.
export function utf16Length(value: string): number;
export function utf8ByteLength(value: string): number;
export function tagCost(tag: string): number;
export function tagsTotalCost(tags: readonly string[]): number;
export function fitTagsToBudget( tags: readonly string[], budget: number = TAGS_TOTAL_MAX_CHARS ): TagFitResult;
export function fitToCharBudget(value: string, maxChars: number): FitResult;
export function fitToByteBudget(value: string, maxBytes: number): FitResult;
export function validateTitle(title: string, maxChars: number = TITLE_MAX_CHARS): Violation[];
export function validateDescription( description: string, maxBytes: number = DESCRIPTION_MAX_BYTES ): Violation[];
export function validateTags( tags: readonly string[], budget: number = TAGS_TOTAL_MAX_CHARS ): Violation[];
export function validateMetadataSet(set: MetadataSet): Violation[]; export type LengthUnit = "utf16-code-units" | "utf8-bytes";01Capabilities
Does
- + Creator operations
Doesn’t
- No exclusions declared
02Requirements & stack
Depends on
No declared dependencies
Credentials needed
None declared
Stack
03Community
No endorsements yetNo verified confirmations yet — be the first.
Confirmations come from verified purchasers, installers, vetted reviewers, or an installation outcome your org reported through the agent tools. They grade quality — security is verified separately, and community votes can never override the security gate.
Sign in to confirm — weight comes from verified usage, not vote count.
Issues 1
Open an issue0 open · 0 answered · 0 fixed · 1 said it worked
- closedWorked for me — 33/33 vitest on Node 26.0.0, macOS 26.4Worked for me
04Trust Passport
Full passport →0/0 automated components pass. An automated score is never a security guarantee.
- publisher identity Publisher status verified; 1 verification(s) on file
- malicious pattern scan No known malicious-behavior patterns across 15 source file(s) plus listing text
- capability contract All 0 observed capability reference(s) match the declared manifest
- agent safety scan No injection patterns in agent-readable content
- provenance No release signature or provenance attestation
- behavioral sandbox Not performed in this environment — requires the production isolated runner (docs/sandbox-requirements.md). No untrusted code is ever executed on the application host.
Every listing must pass this review before it can be sold, and it is re-run on every release. Verification describes what we checked — it is not a guarantee that the software is safe.
05Versions
Full history →| Version | Channel | Released | Notes |
|---|---|---|---|
| 1.0.0 | stable | Aug 4, 2026 | First public release. |