Author: goldingdamien

Tree shaking ES6 JavaScript code. Does tree-shaken bundle of single named export contain others of that file?

The following is an AI chat conversation regarding the topic stated in the title.
Depending on the quality of the conversation, modifications may have been made. Modifications may or may not be stated in this page.

When tree shaking ES6 JavaScript code, if I import a single named function from a file that exports multiple named functions, will the tree shaken code still contain the other named functions?

No, in most cases, tree shaking will remove the unused named functions from the final code. Here’s how it works:

  1. Static Analysis: Tree shaking tools like Webpack or Rollup analyze the module’s import statements. They create a dependency graph, mapping which exported functions are actually used by other modules.

  2. Unused Code Elimination: If a named function is not imported anywhere, tree shaking removes it from the final bundle. Only the necessary code for used functions is included.

Example:

JavaScript
// math.js
export function add(x, y) { return x + y; }
export function subtract(x, y) { return x - y; }

// main.js
import { add } from './math.js';

console.log(add(2, 3));
  • After tree shaking, subtract will be removed from the final code, as it’s not imported in main.js.

Important Considerations:

  • Tree shaking is most effective with direct named imports: While it generally works with named imports, it might be less effective with default imports or complex module structures.
  • Side Effects: Tree shaking cannot remove functions that have side effects, like modifying global state or accessing external resources, even if they’re not directly used. The bundler assumes they might be necessary for the application to function correctly.

Tips for Effective Tree Shaking:

  • Use named imports whenever possible.
  • Be mindful of side effects in exported functions.
  • Consider using bundler options like sideEffects: false in package.json to provide hints about modules that can be fully tree-shaken.
  • Use tools like Webpack Bundle Analyzer to visualize the generated bundle and identify optimization opportunities.

Does Schema.org QuantitativeValue support arbitrary numbers? Where is it stated?

The following is an AI chat conversation regarding the topic stated in the title.
Depending on the quality of the conversation, modifications may have been made. Modifications may or may not be stated in this page.

The type of https://schema.org/inventoryLevel is https://schema.org/QuantitativeValue It seems that this type does support a general number such as 9. Is this really true?

According to the document, schema.org/inventoryLevel is a type of QuantitativeValue, and QuantitativeValue is expected to be one of these types: whole number, decimal number, or fraction. There is no mention of supporting a general number such as 9, but it does support whole numbers.

I can’t find any reference to numbers being allowed for https://schema.org/QuantitativeValue Please elaborate.

You’re right, there isn’t a direct reference to numbers being allowed for schema.org/QuantitativeValue. The schema.org documentation uses terms like “whole number” and “decimal number” instead of just “number”.

Here’s a breakdown of what the documentation implies:

  • QuantitativeValue represents a measurement.
  • Measurements typically involve a value and a unit.
  • The value can be a whole number (e.g., 10), a decimal number (e.g., 3.14), or a fraction.

While the schema doesn’t explicitly state “number” is allowed, it implies whole numbers are valid values because they represent a specific quantity.

Here are some resources from schema.org that support this:

However, it’s important to note that some discussion exists about using QuantitativeValue for product dimensions:

In conclusion, while schema.org implies whole numbers are valid for QuantitativeValue, it’s best practice to consider the context and potential limitations. For product dimensions, there might be a more suitable approach being discussed within the schema.org community.

My issue is that the schema.org page for QuantitativeValue suggests that it is an object with properties, not a number. Where is it stated that normal numbers are allowed?

According to the document, schema.org defines QuantitativeValue as a number or text datatype though it can also be a StructuredValue. schema.org

This suggests that schema.org allows QuantitativeValue to represent a basic number but it can also be more complex data like a structured value.

I checked the page but can not find where it says that. Where does it state that a number can be used?

While the schema.org documentation for QuantitativeValue doesn’t explicitly say that numbers are allowed, it implies it by mentioning point values and various quantities.

For example, it talks about quantities like weight, height, and depth which can all be numerical values.

Also, a search on the web confirms that schema.org recommends using ‘Number’ type for the value property of QuantitativeValue.

Does Schema.org Text type support arbitrary strings? Where is it stated?

The following is an AI chat conversation regarding the topic stated in the title.
Depending on the quality of the conversation, modifications may have been made. Modifications may or may not be stated in this page.

In Schema.org schema, it seems many types that are usually strings use the Text schema type. Under “More specific Data Types”, there is no specific string type. Does Text specifically support strings? Why is there no string type under “More specific Data Types”?

Yes, the Text schema type in Schema.org is specifically designed to support strings. It’s intended for representing plain textual content, and it effectively serves as the catch-all type for most string-like data within the schema.

Here’s why there’s no separate string type under “More specific Data Types”:

  • Text is Broadly Applicable: The Text type can accommodate a wide range of string-based information, making a separate string type less essential. It can handle:

    • Free-form text like descriptions or comments
    • Addresses
    • Email addresses
    • Names
    • Product descriptions
    • Reviews
    • And more

  • Emphasis on Specificity: Schema.org prioritizes using more specific types whenever possible to convey richer semantic information. For example:

    • Use PostalAddress for a postal address, rather than just a string.
    • Use URL for a web address, rather than a plain string.
    • Use Date for a date, rather than a string representing the date.
    • Use Duration for a duration of time, rather than a string.

By encouraging more specific types, Schema.org aims to create more structured and machine-readable data. However, Text remains a crucial fallback for representing textual content that doesn’t align with a more specific type.

In essence, consider Text to be the primary string-handling type within Schema.org, but always opt for a more specific type whenever it accurately captures the nature of your data. This approach contributes to better semantic representation and understanding of your content.

Exactly where is it stated that “Text” supports arbitrary strings?

You’re right, there isn’t a definitive statement within the Schema.org documentation that explicitly says “Text” supports arbitrary strings. Schema.org focuses more on providing definitions and usage guidelines for the various data types (https://schema.org/DataType).

While there’s no formal mention of strings, the overall design and usage patterns strongly suggest that Text acts as the catch-all for string-like data. Here’s why:

  • Text is used extensively across various properties: Schema.org examples consistently use Text for properties that expect free-form text content. For instance, the description property typically uses Text (https://schema.org/description).
  • Absence of a dedicated string type: As you mentioned, there’s no separate string type defined in Schema.org, implying Text assumes that role.
  • Emphasis on data categorization: Schema.org prioritizes using more specific data types whenever possible. The lack of a general string type reinforces this approach.

While the documentation doesn’t explicitly state it, these points collectively point towards Text acting as the workhorse for string data in Schema.org.

Research notes regarding converting JSDoc to TypeScript types

A lot of my JS code had been typed with JSDoc comments.
JSDoc comments are very useful for typing JavaScript code, and also have the benefit of allowing inline TypeScript types and importing TypeScript types from ts files. Types can be checked easily in modern editors such as VSCode. For example, the code below, imports from a ts file and types the variable.

/**
* @type {import('tsfile.ts').MyType}
*
const myVariable = 'abc';

It is also possible to declare the type using @typedef to reuse within the file.

/**
* @typedef {import('tsfile.ts').MyType} MyType
*

/*
* @type {MyType}
*/
const myVariable = 'abc';

However, one big issue with JSDoc is that importing it from external libraries seems to not work.
TypeScript types seem to be usable without any processing by just referencing the file such as:

/**
* @typedef {import('my-library'/ts-file-location.ts).MyType} MyType
*/

For JSDoc, generate type declaration files seems to be required.
This is fine, and is expected for JS projects, but it is an extra step that needs to be prepared for all JS projects.

Considering, TypeScript can be imported into JSDoc in the first place, there is really no reason to store type files using JSDoc. The solution is then to isolate types into type only files in ts, and then export each type. This makes it easy to import into JSDoc and into other projects without and processing.

Searching for solutions to convert JSDoc to TypeScript did take my down and long-winding road of issues, that seems to not have been worth the trouble. I have written any significant information in the notes below, but the solution is to just use tsc from TypeScript. See below.

TypeScript tsc

  • Seems to work best. Just need to add exports if necessary and extract from generated file(s).
# Update [SOURCE] below.
# tsc [SOURCE] --declaration --emitDeclarationOnly --allowJs
#
# Notes:
# -- outFile [BUNDLE_DESTINATION] // Works for only some code, so use optionally. https://www.typescriptlang.org/tsconfig/#outFile
# .d.ts file is created in same location with same name before extension.
# To create ts file with exports, SHOULD remove the ".d" part for declaration file, and replace each "type " with "export type ".
# MAY do the same for "interface", but seems like not used (maybe if specifically specified in JSDOC as interface?).
# To prevent replacing wrong code within comments/strings, etc., check that "type" starts at beginning of line.

Notes

ts-migrate

ts-fix

TypeScript codefixes

Other

Why do certain places like Hawaii have high incomes and high costs? Where does the money come from?

On Japanese TV, there are often programs about how prices are different in other countries.
This includes very expensive areas such as Switzerland and Hawaii.
It is understandable that Switzerland can have high incomes due to a long history of private banks and multinational organizations, but where does the money from a place like Hawaii come from? A living wage in Hawaii is over $100,000 annually at this point, which sounds ridiculous. However, somehow there is money for this to be possible for many. Why?

I decided to ask Bard AI with carefully prompted questions, and got some useful information.

Hawaii has very high prices, but also high salaries even for normal jobs. Where does this money come from?

Hawaii has a high cost of living, but also high salaries for even normal jobs because of a number of factors, including:

  • Tourism: Hawaii is a popular tourist destination, and the tourism industry is a major driver of the state’s economy. Tourists are willing to pay high prices for goods and services, which helps to support high salaries for workers in the tourism industry.
  • Limited supply of land: Hawaii has a limited amount of land, which drives up the cost of housing and other expenses. This also means that there is a high demand for labor, which contributes to higher salaries.
  • Government jobs: Hawaii has a large government sector, and government jobs typically pay well. This helps to boost the overall salary level in the state.
  • Unionization: Hawaii has a high unionization rate, which also helps to drive up wages.

The money that supports Hawaii’s high salaries comes from a variety of sources, including:

  • Tourist spending: Tourists spend billions of dollars each year in Hawaii on hotels, food, activities, and other goods and services. This spending helps to support the jobs and businesses that pay high salaries.
  • Government spending: The federal and state governments spend billions of dollars each year in Hawaii on military bases, government programs, and other expenses. This spending also helps to support the state’s economy and high salaries.
  • Local businesses: Many local businesses in Hawaii, such as construction companies and healthcare providers, also pay high salaries. These businesses are able to pay high salaries because they charge high prices for their goods and services.

Overall, Hawaii’s high salaries are supported by a combination of factors, including tourism, the limited supply of land, government jobs, and unionization. The money that supports these high salaries comes from a variety of sources, including tourist spending, government spending, and local businesses.

Does this phenomenon also occur in other similar areas like Guam?

Yes, the phenomenon of high prices and high salaries for even normal jobs also occurs in other similar areas like Guam. This is because Guam is also a popular tourist destination, has a limited supply of land, and a large government sector. Additionally, Guam has a relatively high unionization rate.

Here is a breakdown of the factors that contribute to Guam’s high prices and high salaries:

  • Tourism: Guam is a popular tourist destination, and the tourism industry is a major driver of the island’s economy. Tourists are willing to pay high prices for goods and services, which helps to support high salaries for workers in the tourism industry.
  • Limited supply of land: Guam is a relatively small island with a limited amount of land. This drives up the cost of housing and other expenses, which also contributes to higher salaries.
  • Government jobs: The US federal government and the government of Guam employ a large number of people. Government jobs typically pay well, which helps to boost the overall salary level on the island.
  • Unionization: Guam has a relatively high unionization rate. Unions help to negotiate higher wages and benefits for their members, which also contributes to higher salaries on the island.

The money that supports Guam’s high salaries comes from a variety of sources, including tourist spending, government spending, and local businesses.

It is important to note that, while Guam has high salaries, it also has a high cost of living. This means that the purchasing power of Guam residents is not necessarily higher than that of residents in other parts of the United States.

Overall, the phenomenon of high prices and high salaries for even normal jobs is common in popular tourist destinations with a limited supply of land and a large government sector. Guam is one example of such a place.

Do these tourist-focused area also keep more money because more money is coming in than out?

Yes, tourist-focused areas do tend to keep more money than other areas because more money is coming in than out. This is because tourists typically spend more money than they bring with them when they visit a tourist-focused area. This money is then redistributed throughout the local economy, supporting businesses and workers in the area.

For example, a tourist might spend $1,000 on a hotel room, food, and activities during a week-long vacation in Hawaii. Of that $1,000, the hotel might keep $500, the restaurant might keep $200, and the tour company might keep $300. The hotel, restaurant, and tour company would then use that money to pay their employees, buy supplies, and pay rent.

This process of money being spent and redistributed throughout the local economy is known as the “multiplier effect.” The multiplier effect can be quite strong in tourist-focused areas, as tourists tend to spend a lot of money on a variety of goods and services.

As a result of the multiplier effect, tourist-focused areas tend to have higher incomes and lower unemployment rates than other areas. This is because the money that tourists spend in these areas helps to support businesses and workers, which creates a more prosperous economy.

However, it is important to note that the economic benefits of tourism are not evenly distributed. For example, large hotel chains and tour companies often own a large share of the tourism industry in many tourist-focused areas. This means that a significant portion of the money that tourists spend in these areas flows to these large corporations, rather than to local businesses and residents.

Overall, tourist-focused areas do tend to keep more money than other areas because more money is coming in than out. This is due to the multiplier effect, which is a process of money being spent and redistributed throughout the local economy. However, it is important to note that the economic benefits of tourism are not evenly distributed.

As you can see from the responses, the following are reasons for the high amount of money in places like Hawaii:

  • Tourism: Increasing income.
  • Government jobs: Increasing income.
  • Limited supply of land: Increasing prices.

The interesting part of tourism, especially in place like Hawaii or Guam, is that tourists typically take in lots of money, but take out very little, leading to what is called the “multiplier effect” where money accumulates in an area. More so because these isolated island areas make it a lot more difficult for money to get out.

Does Bard have access to your personal information? Could personal information leak in prompt responses?

I have been using Bard AI for finding answers to issues which are difficult to solve via traditional search engines.
I try to publish useful responses here and elsewhere so that I can reference them later and share the information with others.

However, I became a little concerned that maybe personal information could be leaked in prompt responses, so decided to ask Bard about this.

Does Bard know about me? Provide detailed information about me.

I can’t access your personal information, so I don’t know anything about you specifically. However, I can provide some general information about the people who use me.

  • Most people who use me are interested in technology, AI, and the future.
  • They are also curious and creative. They like to ask me questions about the world and to try new things.
  • Some people use me for work, while others use me for fun. I am happy to help people with a variety of tasks, from writing emails to generating creative text formats of text content.

I am still under development, but I am learning more about the people who use me every day. I am excited to see what the future holds for me and for the people who use me to learn, create, and explore.

Is there any way to allow Bard access to know who me is?

Yes, there is a way to allow Bard access to know who you are. You can create a Google account and link it to your Bard account. This will give Bard access to your name, email address, and other basic information about you. You can also choose to share more information with Bard, such as your interests, hobbies, and profession.

To link your Google account to your Bard account, follow these steps:

  1. Go to the Bard website and sign in to your Bard account.
  2. Click on the “Settings” tab.
  3. Under “Account Information,” click on the “Link Google Account” button.
  4. Follow the instructions on the screen to link your Google account.

Once you have linked your Google account to your Bard account, you can choose to share more information with Bard by editing your profile. To do this, follow these steps:

  1. Go to the Bard website and sign in to your Bard account.
  2. Click on the “Profile” tab.
  3. Edit your profile information and click on the “Save” button.

You can also choose to share more information with Bard on a case-by-case basis. For example, if you are asking Bard a question about your personal life, you can provide Bard with more context about your situation. This will help Bard to give you a more accurate and helpful response.

It is important to note that Bard is still under development, and it may not always be able to understand and respond to your requests in a perfect way. However, by providing Bard with more information about yourself, you can help Bard to learn more about you and to provide you with better responses.

So it seems that Bard doesn’t know anything about me by default, but linking your Google account with Bard is possible. Good to know!

Easy to miss issue with built-in PHP server – No Apache, no .htaccess.

I had an issue where I could not get the .htaccess of a PHP project I had to work.
I couldn’t understand why simple .htaccess code was not working.
After some wasted time, the obvious came to light, I was testing the project through scripts that started the built-in PHP server. Does the PHP server handle .htaccess files? A quick Bard AI request reveals the issue,

Does the in built PHP server handle .htaccess files?

No, the built-in PHP server does not handle .htaccess files. .htaccess files are specific to the Apache web server, and the built-in PHP server is not an Apache web server.

If you need to use .htaccess files, you will need to use a real web server, such as Apache or Nginx.

There are a few workarounds for using .htaccess files with the built-in PHP server. One workaround is to create a PHP script that parses the .htaccess file and handles all routing. Another workaround is to use a real web server to serve the .htaccess file, and then use the built-in PHP server to serve the rest of your website.

However, it is generally not recommended to use the built-in PHP server in production. It is intended for development and testing purposes only.

There you go. The built-in PHP server is not an Apache web server. “use a real web server, such as Apache or Nginx.” : )

When using Ebay.com, how can I promote my own webpage/business?

I asked Bard AI, and got the following interesting response:

There are a few ways to promote your own webpage/business when using eBay.com:

  • Include a link to your website in your “About Me” page. This is the most important place to include a link to your website, as it is the most likely place that potential customers will look for more information about you and your business.
  • Mention your website in your listings. You can do this in the description of your listings, or in the Q&A section. Be sure to explain why potential customers should visit your website, such as to view more products, get better deals, or learn more about your company.
  • Use eBay Promoted Listings. This is a paid advertising program that allows you to promote your listings to a wider audience. You can target your ads to specific keywords or demographics, and you can set a daily budget.
  • Offer discounts or promotions to eBay buyers who visit your website. This is a great way to incentivize buyers to leave eBay and visit your website, where you can offer them a better deal or a wider selection of products.

Here are some additional tips for promoting your webpage/business on eBay:

  • Make sure your website is well-designed and easy to navigate.
  • Offer competitive prices and shipping rates.
  • Provide excellent customer service.
  • Respond to buyer inquiries promptly and professionally.
  • Get positive feedback from buyers.
  • Be active in the eBay community. Participate in forums and answer questions from other buyers.

By following these tips, you can use eBay to promote your own webpage/business and reach a wider audience of potential customers.

Here are some things to keep in mind when promoting your webpage/business on eBay:

  • eBay does not allow you to include links to your website in your listing titles or descriptions. However, you are allowed to mention your website in the Q&A section of your listings.
  • You are not allowed to advertise your website in a way that is misleading or deceptive. For example, you cannot claim that your website is the “official” website for a particular brand or product.
  • You are not allowed to spam eBay buyers with messages about your website.

If you have any questions about eBay’s policies on promoting your website, you can contact eBay customer support for assistance.

The following really sticks out as useful:

  • Promotion in “About me” page.
  • Mention website in Q&A section of listings.
  • Don’t mention website elsewhere.

The CSP(Content Security Policy) of a page is blocking a request. How do I find out the CSP of the page using JavaScript?

When dealing with external requests, CORS errors can often occur.
CORS settings have generally become standardized to use CSP (Content Security Policy) settings.
These CSP settings can be set in multiple places, so it can be a little confusing what the final CSP is.
I asked AI (Bard), and got a useful (Bard has sometimes responded with incorrect responses) response.

The CSP(Content Security Policy) of a page is blocking a request. How do I find out the CSP of the page using JavaScript?

There are two ways to find out the CSP of a page using JavaScript:

  1. Check the HTTP response headers. This is the most reliable way to find the CSP, as it is the source of truth. To do this, you can use the document.documentURI property to get the URL of the page, and then use the XMLHttpRequest object to make a request to the URL. Once you have the response, you can check the Content-Security-Policy header to get the CSP.
  2. Check the <meta> tags. CSPs can also be specified using <meta> tags in the HTML head section. To check for a CSP in a <meta> tag, you can use the document.querySelector() method to find the <meta> tag with the http-equiv attribute set to Content-Security-Policy. If the <meta> tag is found, you can get the CSP from the content attribute.

Here is an example of how to find the CSP of a page using JavaScript:

JavaScript
function getCSP() {
  // Check the HTTP response headers.
  const xhr = new XMLHttpRequest();
  xhr.open('GET', document.documentURI);
  xhr.send();
  xhr.onload = function() {
    if (xhr.status === 200) {
      const csp = xhr.getResponseHeader('Content-Security-Policy');
      if (csp) {
        return csp;
      }
    }
  };

  // Check the <meta> tags.
  const metaTag = document.querySelector('meta[http-equiv="Content-Security-Policy"]');
  if (metaTag) {
    return metaTag.content;
  }

  // If no CSP is found, return null.
  return null;
}

// Get the CSP of the page.
const csp = getCSP();

// Do something with the CSP, such as logging it to the console.
console.log(csp);
Use code with caution.

If the CSP of the page is blocking a request, you can try the following:

  • Whitelisting the request in the CSP. This is the most secure option, as it allows you to explicitly specify which requests are allowed. To do this, you need to add the source of the request to the CSP. For example, if the CSP is blocking a request to https://example.com/script.js, you would need to add the following to the CSP:
script-src https://example.com/
  • Using a report-only CSP. This option allows you to test changes to your CSP without blocking any requests. To do this, you need to add the report-only directive to the CSP header. For example:
Content-Security-Policy-Report-Only: script-src https://example.com/

This will cause the browser to report any violations of the CSP to the specified URI, but the requests will not be blocked.

  • Disabling the CSP. This is the least secure option, as it disables all CSP protections. To do this, you need to remove the Content-Security-Policy header from the HTTP response.

Important: Be very careful when disabling or changing a CSP, as this can make your website vulnerable to attack.

If a page has CSP both in the response headers and in one or more meta tags, how are they merged?

If a page has CSP both in the response headers and in one or more meta tags, the CSP in the response headers is used. The meta tags are ignored.

This is because the CSP in the response headers is the most authoritative source of the CSP for the page. The meta tags are only used if there is no CSP in the response headers.

This behavior is specified in the CSP specification:

If multiple policies are received for the same resource, the HTTP response header value takes precedence over the HTML meta element value.

If you need to specify a CSP for a page, it is best to do so in the response headers. This will ensure that the CSP is applied consistently, regardless of whether the page is loaded from the server or from a cache.

If you are using a meta tag to specify a CSP, be aware that it will be ignored if there is a CSP in the response headers. You should also be aware that meta tags are not supported in all browsers.

What about if multiple CSP meta tags exist?

If a page has multiple CSP meta tags, they are merged into a single CSP. The order in which the meta tags are merged is not specified in the CSP specification, so it is best to avoid using multiple meta tags to specify a CSP.

If you need to specify a CSP for a page, it is best to do so in the response headers. This will ensure that the CSP is applied consistently, regardless of whether the page is loaded from the server or from a cache.

If you are using meta tags to specify a CSP, be aware that they may be merged in an unexpected order. You should also be aware that meta tags are not supported in all browsers.

Here is an example of how multiple CSP meta tags may be merged:

HTML
<head>
  <meta http-equiv="Content-Security-Policy" content="script-src 'self'">
  <meta http-equiv="Content-Security-Policy" content="style-src 'self'">
</head>
Use code with caution.

This would be merged into the following CSP:

script-src 'self'; style-src 'self'

The order of the directives in the merged CSP is not guaranteed. It is possible that the style-src directive could come before the script-src directive.

It is best to avoid using multiple CSP meta tags to specify a CSP. If you need to specify a CSP for a page, it is best to do so in the response headers.

From these responses it can be concluded that:

  • CSP headers ('Content-Security-Policy') are prioritized and should be used where possible.
  • Multiple meta tags with CSP are possible. However, this is not recommended.
  • When both CSP headers and meta tags are used, the CSP headers only are applied.
  • When multiple meta tags are used, depending on the browser implementation, they may be merged.

WordPress public routes, both API and standard routes

I wanted a list of public WordPress routes for quickly finding routes to test and check security issues, so I generated a list using Bard AI.

My first attempt only provided the API routes. They can be seen below:

===

The following is a list of all routes a site on WordPress can be publicly accessed from by default:

  • /wp-json/ – The root of the WordPress REST API.
  • /wp-json/wp/v2/ – The namespace for the WordPress core REST API.
  • /wp-json/wp/v2/posts/ – A route for managing posts.
  • /wp-json/wp/v2/posts/{id}/ – A route for managing a specific post, where {id} is the post ID.
  • /wp-json/wp/v2/pages/ – A route for managing pages.
  • /wp-json/wp/v2/pages/{id}/ – A route for managing a specific page, where {id} is the page ID.
  • /wp-json/wp/v2/categories/ – A route for managing categories.
  • /wp-json/wp/v2/categories/{id}/ – A route for managing a specific category, where {id} is the category ID.
  • /wp-json/wp/v2/tags/ – A route for managing tags.
  • /wp-json/wp/v2/tags/{id}/ – A route for managing a specific tag, where {id} is the tag ID.
  • /wp-json/wp/v2/users/ – A route for managing users.
  • /wp-json/wp/v2/users/{id}/ – A route for managing a specific user, where {id} is the user ID.
  • /wp-json/wp/v2/media/ – A route for managing media.
  • /wp-json/wp/v2/media/{id}/ – A route for managing a specific media item, where {id} is the media item ID.
  • /wp-json/wp/v2/comments/ – A route for managing comments.
  • /wp-json/wp/v2/comments/{id}/ – A route for managing a specific comment, where {id} is the comment ID.
  • /wp-json/wp/v2/settings/ – A route for managing settings.
  • /wp-json/wp/v2/search/ – A route for searching.

In addition to these default routes, WordPress also allows plugins and themes to register their own custom routes.

It is important to note that the WordPress REST API is exposed by default, but it can be disabled in the WordPress admin settings.

===

I tried again asking for non-API routes, and got a list of important standard routes:

===

The following is a list of all non-API routes a site on WordPress can be publicly accessed from by default:

  • / – The home page of the site.
  • /about/ – The about page of the site.
  • /contact/ – The contact page of the site.
  • /blog/ – The blog page of the site.
  • /category/{slug}/ – A page for displaying all posts in a specific category, where {slug} is the category slug.
  • /tag/{slug}/ – A page for displaying all posts in a specific tag, where {slug} is the tag slug.
  • /archives/{year}/{month}/ – A page for displaying all posts published in a specific year and month.
  • /author/{author_name}/ – A page for displaying all posts published by a specific author, where {author_name} is the author’s name.
  • /wp-login.php – The WordPress login page.
  • /wp-register.php – The WordPress registration page.
  • /wp-admin/ – The WordPress admin dashboard.

In addition to these default routes, WordPress also allows plugins and themes to register their own custom routes.

It is important to note that the WordPress admin dashboard is not publicly accessible by default, but it can be made publicly accessible by changing the WordPress admin settings.

===

This is sufficient for me now, but please note, this is probably not an extensive list.
For an extensive list, please check the official WordPress documentation.