Is AI hallucination on packages/deps really widespread?