mirror of
https://github.com/esengine/DeepSeek-Reasonix.git
synced 2026-11-07 10:45:59 -10:00
esengine
c6031016b1
`@scope/[email protected]` and `[email protected]` were rejected by both looksLikePackage implementations (Go installer and registry publish validation), so an npm MCP entry could not pin its version. Both now accept an optional `@<exact semver>` suffix and still refuse ranges, dist-tags, empty versions, a repeated `@`, and anything with whitespace, shell metacharacters, path segments or scheme prefixes. A leading `-` is now refused as well, so a bare source can no longer be read by npx as an option. The default MCP name drops the version suffix. Pinning the top-level package does not pin its transitive dependencies.