diff --git a/docs/host-commands.md b/docs/host-commands.md
index 45ff304..ba68631 100644
--- a/docs/host-commands.md
+++ b/docs/host-commands.md
@@ -30,11 +30,11 @@ These commands run on the developer's host machine (via `ddev <command>`), from
 - `mr` — Pushes the current branch and creates a draft GitLab MR via `glab mr create`, prefilling the title from the branch's `T-<id>` and description suffix.
 - `open-board` — Opens the Teamwork board for the project, building the URL from `TEAMWORK_PROJECT_ID`/`TEAMWORK_DOMAIN` in `.ddev/.env.anner`. Aliases: `tw-board`.
 - `open-issue` — Opens (and copies to clipboard) the Teamwork task URL for the `T-<id>` in the current branch name, falling back to the previous branch if needed. Aliases: `tw-open`.
-- `package-checker` — Scans every project in a GitLab group for usage (and version) of a given Composer package by reading each project's `composer-manifest.yaml`, optionally flagging insecure versions. Aliases: `wtfiow`.
+- `package-checker` — Scans every project in a GitLab group for usage (and version) of one or more Composer packages (`vendor/package` or `vendor/package:max-insecure-version`, OR-matched) by reading each project's `composer-manifest.yaml`, optionally flagging insecure versions; a project is reported as a single aggregated line listing every matching package, in red if any match is insecure. Aliases: `wtfiow`.
 - `protect` — Enables/disables/resets HTTP basic-auth protection on a nixOS-hosted dev project via nginx config and htpasswd; no-ops unless `ANNERTECH_LOCAL_DEV` is set.
 - `remote-db` — Pulls the latest database (skipping files) from the configured upstream provider (`DDEV_UPSTREAM_PROVIDER` in `.ddev/.env.anner`) via `ddev pull <provider> --skip-files -y`.
 - `remote-files` — Pulls the latest files (skipping the DB) from the upstream provider via `ddev pull <provider> --skip-db -y`.
-- `sanity-check` — Runs a suite of Drupal/Composer/DDEV/Upsun health checks (version constraints, performance settings, extensions, safe-uninstall, composer audit, Solr, Upsun project config, APCu, CDN, botbuster) by sourcing scripts from `commands/host/_lib/`. Supports `-s` (silent), `-b`/`--best-practices`, `-o`/`--offline`; exits 2 on critical errors (used to block pushes), 1 on regular errors.
+- `sanity-check` — Runs a suite of Drupal/Composer/DDEV/Upsun health checks (version constraints, performance settings, extensions, composer audit, Solr, Upsun project config, APCu, CDN, botbuster) by sourcing scripts from `commands/host/_lib/`. The safe-uninstall check is currently disabled (commented out) pending a fix for a bug in it. Supports `-s` (silent), `-b`/`--best-practices`, `-o`/`--offline`; exits 2 on critical errors (used to block pushes), 1 on regular errors.
 - `teamwork-operations` — Interactive fzf "Teamwork Operations Centre" dispatching to `open-issue`, `tw-comment`, `tw-timelog`, `tw-description`, `tw-new`, `tw-batch-card-maker`, plus branch creation/switching helpers. Aliases: `tw`.
 - `tests` — Detects which test suites (Backstop, Behat, Bruno, Cypress, PHPUnit) are configured in the project and prints the commands to run each.
 - `timew` — Tags the current Timewarrior interval with the branch's `T-<id>` task and the project directory name.