[hazeliscoding]

Summary

marked 16 stopped shipping marked.min.js, which readme-wizard loaded from angular.json, and only the build said so. The plan now reads the scripts and styles every target in angular.json loads from node_modules, checks each moving package's next release for them, and names a missing one under that major:

  angular.json: loads node_modules/marked/marked.min.js, which marked 17.0.2 no longer ships. Search the code for what used it, then remove or replace the entry

• The release's files come from its tarball, read in memory as the license check already did. That walk now lives in one place and follows the ustar prefix field, where a path longer than 100 bytes continues, so a deep file can't be missed.
• A release it can't read is listed as unchecked, not passed over.
• Step 4e of the skill handles the line, and the troubleshooting entry for a file that no longer exists mentions it.

Checked

• npm test passes. New tests cover a dropped marked.min.js next to a file that stays, a path deep enough to need the prefix field (which fails without the prefix handling), and an unreadable tarball.