- Accept import paths starting with digit (e.g., 9fans.net/go) by
relaxing filter from ^[a-zA-Z] to ^[[:alnum:]]
- Fix misleading comment: loop uses Bash process substitution, not POSIX
- Remove redundant \$ from grep regex (literal $ unreachable)
- Capture stderr separately in go list to avoid mixing errors with output
- Clarify CONVENTIONS.md wording on transitive vs direct deps
Reviewed-by: sonnet-review-bot
Reviewed-by: gpt-review-bot
Rodin
0619e2b617