calllint 0.8.0 → 0.9.0

package/dist/index.js

@@ -4594,15 +4594,39 @@ async function fetchNpmFacts(packageSpec, fetchJson) {
     (k) => typeof scripts[k] === "string" && scripts[k].length > 0
   );
   const deprecated = typeof versionDoc.deprecated === "string" ? versionDoc.deprecated : void 0;
+  const description = typeof versionDoc.description === "string" ? versionDoc.description : void 0;
+  const readme = typeof doc.readme === "string" ? doc.readme : void 0;
   return {
     name,
     versionExists: true,
     installScripts,
     deprecated,
     latestVersion,
-    resolvedVersion
+    resolvedVersion,
+    description,
+    readme
   };
 }
+function surfacesFromNpmFacts(facts) {
+  const surfaces = [];
+  if (typeof facts.description === "string" && facts.description.length > 0) {
+    surfaces.push({
+      path: `registry:${facts.name}#description`,
+      kind: "registry-description",
+      text: facts.description,
+      truncated: false
+    });
+  }
+  if (typeof facts.readme === "string" && facts.readme.length > 0) {
+    surfaces.push({
+      path: `registry:${facts.name}#readme`,
+      kind: "registry-readme",
+      text: facts.readme,
+      truncated: false
+    });
+  }
+  return surfaces;
+}
 function findingsFromNpmFacts(facts, fetchedAt) {
   const findings = [];
   const stamp = (f) => ({ ...f, source: "online", fetchedAt });
@@ -4660,6 +4684,9 @@ function findingsFromNpmFacts(facts, fetchedAt) {
       fix: "Migrate to the maintained successor or a supported version."
     }));
   }
+  for (const f of analyzeDocumentSurfaces(surfacesFromNpmFacts(facts))) {
+    findings.push(stamp(f));
+  }
   return findings;
 }
 async function enrichNpmPackage(packageSpec, fetchJson, fetchedAt) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "calllint",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Evidence-backed security verdicts for MCP servers and agent tools. Lint agent tool-call risk before tools run — SAFE / REVIEW / BLOCK / UNKNOWN, with evidence. Never executes the server it judges.",
   "keywords": [
     "mcp",