API needs to handle errors

I think we might've broken tags when we removed the search page
cc/ @tjsavage

$ is not escaped. Consider not using string.replace.

Should check license, bower and return failed in these cases.

• Version ingestion (put only) transactional with Library fetch. (validate that the version is still relevant).
• Version deletion transactional with Library fetch (validate that the version is no longer present in tags).
• Version deletion should be triggered only when there are no status=pending entries

https://custom-elements.appspot.com/element/GoogleWebComponents/google-map

This service requires an API key.

We should get a thorough a11y review before we open this up at the Summit. When do you think we might be a good state to run through with an audit?

We can't show these elements on the site until our system understands their license correctly:

• firebase-element
• google-analytics
• google-apis
• google-calendar
• google-castable-video
• google-chart
• google-hangout-button
• google-map
• google-sheets
• google-signin
• google-streetview-pano
• google-url-shortener
• google-web-components

eg. google-web-components includes "license": "BSD", in its bower.json but that isn't a valid SDPX Identifier.

google-feeds comes up as BSD-2-Clause based on the LICENSE file, but its bower.json says Apache-2.

@addyosmani @ebidel

Request: GET custom-elements-staging.appspot.com/api/search/'%22%3E%3Cimg%3E?offset=0 (View request logs)
Status: 500 Internal Server Error

Client shouldn't be making this request, but search API also shouldn't result in a 500.

#266 (comment)

• PolymerElements/paper-radio-group
  • This has broken dependencies -- some actual dependencies (like paper-radio-button) are listed as devDependencies.
• PolymerElements/paper-badge
• PolymerElements/iron-test-helpers
• PolymerElements/iron-iconset

Repro:

http://custom-elements.appspot.com/element/PolymerElements/paper-fab

The readme has

{"message":"API rate limit exceeded for 107.178.195.128. (But here's the good news: Authenticated requests get a higher rate limit. Check out the documentation for more details.)","documentation_url":"https://developer.github.com/v3/#rate-limiting"}

Doesn't look like the API key is being sent & 403's don't seem to be handled

Says "Latest commit 1 days ago," should say "Latest commit 1 day ago"

Either add a second app.yaml, or run polymer build in the top level directory and serve from build/ when testing build/ and serve top level for local unbundled testing.

Add deploy step to gulp? To run build and serve build/ version.

Seems to be broken currently