`install.sh` defaults `SOURCE` to `git+https://github.com/Zipstack/unstract-cli@main\`, and the README's `curl | sh`, `uv tool install` and `uvx` lines all point at the same unpinned branch. Every install gets whatever `main` holds at that moment: no version pin, no reproducibility, and any bad commit on `main` is live for new installers immediately.
Once the first release is published to PyPI:
- default `SOURCE` in `install.sh` to the PyPI package name
- change the README install lines to a version-pinned install
- keep the `UNSTRACT_CLI_SOURCE` override for branch or local-checkout installs
Raised from review of #2.
`install.sh` defaults `SOURCE` to `git+https://github.com/Zipstack/unstract-cli@main\`, and the README's `curl | sh`, `uv tool install` and `uvx` lines all point at the same unpinned branch. Every install gets whatever `main` holds at that moment: no version pin, no reproducibility, and any bad commit on `main` is live for new installers immediately.
Once the first release is published to PyPI:
Raised from review of #2.