fix: Handle osslili informational output in download_and_scan_package (v1.6.1)

[oscarvalenzuelab]

Problem

The download_and_scan_package tool was failing with JSON parsing errors when scanning packages. User reported: "I'm seeing that the tool is still failing the download" with pkg:pypi/docxtpl@0.20.2.

Root Cause:

• osslili now outputs informational messages before JSON: ℹ Processing local path: package.tar.gz
• Code tried to parse this directly as JSON → json.loads() failed
• Error: "Expecting value: line 1 column 1 (char 0)"

Solution

Added preprocessing to strip informational messages before JSON parsing:

• Find first { character in output
• Parse JSON from that position
• Preserves backward compatibility

Changes

• mcp_semclone/server.py: Strip informational messages before parsing osslili output (lines 2026-2031)
• Version: 1.6.0 → 1.6.1
• CHANGELOG.md: Added v1.6.1 entry with fix details and pipx installation note
• All files: Updated version references

Testing

• All 7 tests passing
• Manually tested with pkg:pypi/docxtpl@0.20.2
• osslili, upmex, purl2src all work correctly

Installation Note

When using pipx, ensure purl2src is globally available:

pipx inject mcp-semclone purl2src --include-apps --force

Impact

• Fixes download_and_scan_package tool
• Works with latest osslili versions
• Resolves field-reported failures