Frequently asked questions

Common questions about the registry and its limits.

Does a clean result guarantee safety?

No. Scans and policies reduce risk; they cannot detect every issue. See verdicts.

Can a package manager bypass the registry?

Yes. Another registry or index, a direct URL, a lockfile pointing elsewhere, or an existing cache can avoid the intended path. Check your configuration and use doctor.

Are hosted CLI distribution and a public MCP endpoint available?

They are coming soon. The source implements a CLI and local MCP bridge, but their presence in source does not mean a hosted endpoint or installer is live.