v0.23.1 — the registry card stopped being ten releases stale

[sshlg]

SKILL-CARD.md carries the fields Anthropic's Skills-for-enterprise guidance asks every organisation to keep — "written so somebody who did not build this can decide".

It said 0.13.5 while this package ships 0.23.0: ten minor releases of behaviour the card does not describe, at the root of a public repository, in exactly the field that dates it.

Why it could only drift

The version moves in package.json, plugin.json and marketplace.json on every release. The card was in no list. Measured across the family on 2026-09-01: four of nine cards were behind, this one worst.

The new check refuses a card whose Version row disagrees with package.json — and refuses a card that states no version at all, because one a reader cannot see go stale is worse than one that lags visibly. Watched failing before it shipped:

SKILL-CARD.md: the registry card says 0.13.5 and package.json ships 0.23.0 — the card
is what somebody who did not build this decides from, so the one field that dates it
may not lag.

Found on the way

test/validate.py carried an invalid escape sequence in a docstring — \| in a non-raw string — which Python already warns about and future versions will reject. In a file that exists to refuse malformed rows, from a paragraph explaining how to escape a pipe. Now raw; the file compiles with zero escape warnings.

Gate

npm test → rc=0.

🤖 Generated with Claude Code