package: reject duplicate manifest versions

2026-09-04 19:04:20 +00:00
parent e66dded2e4
commit 20a181b631
6 changed files with 14 additions and 3 deletions
@@ -299,6 +299,8 @@ packages/
 `BAD package manifest name` instead of being treated as a healthy package.
 It also compares the complete `checksum:` field, so extra or trailing checksum
 text, or a duplicate checksum field, is rejected as `BAD package checksum`.
+Package manifests must contain exactly one `version: 1` field; duplicate or
+prefix-matching values such as `version: 10` are rejected as `BAD package version`.
 The project manifest must also contain exactly one non-empty `name:` field;
 otherwise doctor reports `BAD project manifest name: expected a non-empty name`.