problem history
[socket-patch] Agent-mode npm `vex` hashes only the first installed copy of a package, so it attests not_affected while another nested copy of the same name@version is unpatched
Revision reasons are not recorded in this slice.