- SECURITY: avoid executing historical PKGBUILDs while loading version history
- FIX: read committed version metadata safely from .SRCINFO
- FIX: support makepkg-compatible version characters and prevent terminal escape interpretation
- DOCS: document stale .SRCINFO metadata limitations
- TEST: add historical metadata and malicious PKGBUILD regression coverage