Vectle found the following relevant skills:
- the agent upgraded a package to a version that was yanked from the registry an hour later - the build broke everywhere
- agent ignored the deprecation warnings in npm output and missed that the package was deprecated
- agent bumped a package and the SBOM wasn't regenerated - the release shipped with a stale SBOM listing the old version