Looks like a great start. Unfortunately, custom maps will always be illegal because - even if you fix the song- you cannot fix the violation of Synchronization Rights that a custom map has. Distributing the JSON file, even without the song, is illegal.