docs(plugins): drop unreachable repo-root LICENSE pointer from 13 READMEs (wave 1)

[kyle-sexton]

No linked issue — wave 1 of 3; #537 stays open until all 39 plugins are done.

Deletes the dangling "See the LICENSE file at the root of the repository" sentence from the first 13 plugin READMEs (alphabetical), keeping the inline MIT (SPDX-License-Identifier: MIT) statement — an installed consumer runs from the isolated plugin cache and cannot reach a marketplace-root file. Patch bump + CHANGELOG entry per plugin, mirroring the merged #426 two-plugin fix.

Verification: repro grep (at the root of|root of (the )?melodic) returns 0 hits over the 13 wave-1 READMEs, 26 hits over the untouched remainder; all 13 manifest versions match their CHANGELOG top entry.

Related

• docs(plugins): 39 plugin READMEs still point at unreachable repo-root LICENSE (fleet-wide follow-up to #426) #537 (wave 1 of 3)
• markdown-format + playwright: README points at marketplace-repo LICENSE the installed consumer cannot reach #426 (the two-plugin fix this mirrors)

🤖 Generated with Claude Code

[claude]

Claude finished @kyle-sexton's task in 1m 0s —— View job

---

Security Review

• Gather PR diff and changed files
• Review README.md changes for security issues
• Review plugin.json version bumps for supply-chain risk
• Review CHANGELOG.md entries
• Post findings

---

No security issues found.

This PR is a documentation-only change across 13 plugins, touching three file types per plugin:

README.md — Each file removes a two-line License section pointer to a LICENSE file at the repository root that is unreachable when a plugin runs from the isolated consumer cache. The replacement is the inline SPDX identifier MIT (SPDX-License-Identifier: MIT). No executable content, no URLs to external resources, no user-controlled input.

plugin.json — Each manifest receives a patch version bump (e.g., 0.4.1 → 0.4.2). The only field changed is version; no dependency pins, MCP server endpoints, tool definitions, or permission entries are added or modified. A version bump does prompt consumers to pull an update, but the update itself carries only the documentation changes above — there is no supply-chain risk.

CHANGELOG.md — Plain Markdown entries describing the documentation change. No executable content, no external URLs.

No GitHub Actions workflows are touched, so there are no pull_request_target / workflow_run misuse concerns, no script injection surfaces, and no permission-widening changes. No credentials or tokens appear anywhere in the diff.

[claude]

Claude finished @kyle-sexton's task in 1m 32s —— View job

---

PR Review

• Gather context and read CLAUDE.md
• Review the PR diff
• Spot-check README changes across several plugins
• Verify CHANGELOG format and version bumps
• Check plugin.json version increments
• Post review findings

---

This is a clean, well-executed mechanical cleanup. Here's what I verified:

What the PR does: Removes the unreachable See the LICENSE file at the root of the melodic-software/claude-code-plugins repository. line from the License section of 13 plugin READMEs. The motivation is correct — plugins installed to the isolated plugin cache at ${CLAUDE_PLUGIN_DATA} cannot reach the repo root, so the pointer is a dead reference for installed consumers.

Version bumps — all correct. Every plugin gets a patch increment (docs-only → patch per semver), and every bump is correctly applied:

Plugin	Before	After
actionlint	0.4.1	0.4.2
architecture	0.3.3	0.3.4
bash-format	0.5.1	0.5.2
biome-format	0.4.1	0.4.2
bug-report	0.5.0	0.5.1
claude-config	0.7.0	0.7.1
claude-memory	0.2.1	0.2.2
claude-ops	0.15.1	0.15.2
code-tidying	0.6.0	0.6.1
codebase-health	0.6.1	0.6.2
context7	0.4.0	0.4.1
debugging	0.4.0	0.4.1
desktop-notification	0.4.1	0.4.2

CHANGELOG entries — consistent and accurate. The entry wording correctly describes this as documentation-only with no behavior change. The date-free version header format (e.g., ## [0.4.2] without - YYYY-MM-DD) is pre-existing across all plugins and not introduced here.

After-state consistency. The before-state had minor inconsistencies (some used backtick-quoted `LICENSE`, others didn't; one also backtick-quoted the repo name). After this PR, all 13 end uniformly with MIT (SPDX-License-Identifier: MIT). — clean.

REVIEW.md blocking checks — all N/A for a docs-only diff; no secrets, no handlers, no data access, no tenant data. Nothing blocking.

One observation (not a blocker): 26 plugins on main still carry the old pointer (grep confirms a wave 2+ will be needed). That's consistent with the "wave 1" naming and no action needed here.

Verdict: ✅ Looks good to merge. No issues found.