Function validateReadme

internal/validators/registries/nuget.go:207–254

(ctx context.Context, serverName, lowerID, lowerVersion string, client *http.Client, index *serviceIndex)

}

func validateReadme(ctx context.Context, serverName, lowerID, lowerVersion string, client *http.Client, index *serviceIndex) (ReadmeState, error) {
	readmeURLTemplate, err := getReadmeURLTemplate(index)
	if err != nil {
		return NoReadme, fmt.Errorf("failed to get README URL template: %w", err)
	}

	// Replace placeholders in the template. PathEscape both the id and version
	// so a publisher cannot smuggle "/" / ".." through the template into a
	// fetch against an unrelated package's README.
	readmeURL := strings.ReplaceAll(readmeURLTemplate, "{lower_id}", url.PathEscape(lowerID))
	readmeURL = strings.ReplaceAll(readmeURL, "{lower_version}", url.PathEscape(lowerVersion))
	req, err := http.NewRequestWithContext(ctx, http.MethodGet, readmeURL, nil)
	if err != nil {
		return NoReadme, fmt.Errorf("failed to create NuGet README request: %w", err)
	}

	req.Header.Set("User-Agent", userAgent)

	resp, err := client.Do(req)
	if err != nil {
		return NoReadme, fmt.Errorf("failed to fetch NuGet README: %w", err)
	}
	defer resp.Body.Close()

	if resp.StatusCode == http.StatusOK {
		// Check README content
		readmeBytes, err := io.ReadAll(resp.Body)
		if err != nil {
			return NoReadme, fmt.Errorf("failed to read NuGet README content: %w", err)
		}

		readmeContent := string(readmeBytes)

		// Check for mcp-name: format (more specific)
		mcpNamePattern := "mcp-name: " + serverName
		if strings.Contains(readmeContent, mcpNamePattern) {
			return ValidReadme, nil // Found as mcp-name: format
		}

		return InvalidReadme, nil
	}

	if resp.StatusCode == http.StatusNotFound {
		return NoReadme, nil
	}

	return InvalidReadme, fmt.Errorf("NuGet README request returned status %d", resp.StatusCode)
}

func getPackageContentBaseURL(index *serviceIndex) (string, error) {
	for _, resource := range index.Resources {