package: fail remove on unsafe lock refresh

2026-09-01 17:29:18 +00:00
parent b75b05d0fa
commit 6edbd587bc
6 changed files with 17 additions and 5 deletions
@@ -93,6 +93,8 @@ folder/name
 bad name
 ```

+If an unsafe package name somehow gets into `claro.project`, package maintenance commands should not quietly continue. `claro package doctor` points out the bad name, `claro package lock` refuses to write lockfile data for it, and `claro package remove NAME` now exits with an error if the lockfile refresh still sees an unsafe package name after the removal.
+
 ## Why this matters

 Packages are important for Claro's future, but the workflow must stay friendly: