You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
PluginsArea: what it touches
ImprovementsKind: in v2.1.282,
ImprovementsSection of the release
What
A plugin is identified as plugin@marketplace, where a marketplace is a catalogue that plugins are installed from. Both ways of installing a plugin now check this name first. Each half must begin with a letter or digit and contain only letters, digits, -, . and _. If it does not, the install stops with a message that points you to the marketplace's maintainer.
Why
Before, a bad name was saved into Claude Code's record of installed plugins without being checked. Now the install fails clearly and the record stays clean.