I saw that but don’t understand it. The manifest doesn’t have anything that I would think needed to be kept hidden. It looked to me to just contain the info needed for the PI and such. I guess I need to build a test commercial widget to see exactly what happens.
If you remove the manifest.xml file from the widget directory the widget is no longer recognized. I can see the reason for not distributing the .lcb file with protected widgets, but I agree that the .xml file not only seems necessary but doesn't contain any data I wouldn't want to distribute.
And especially since the plan of getting the relevant info from the .lcdoc file doesn't seem to be working.