here's an example in action of coding agents suggesting whatever random open souce package that made sense, but... is it actually healthy? maintainable? free of vulnerabilities? who knows unless you install the Snyk MCP server and then you know (there's a package health tool)