Marketplace names now reject path traversal patterns — names containing /, \, .. sequences, or consisting of just . are rejected with a clear error message.
Evidence
Path traversal validation (search for 'Marketplace name cannot contain path separators')
Strings lifted out of the shipped bundle, so the claim above can be checked against them.