{
  "id": 7845955,
  "title": "FAQ: Five Myths About Agent-Installed Dependencies",
  "url": "https://urgent.news/2026/09/16/faq-five-myths-about-agent-installed-dependencies",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-16T18:41:08.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/gitlab_3188/faq-five-myths-about-agent-installed-dependencies-1cpp"
  },
  "original_language": "en",
  "account": "Fact 1: The article addresses common misconceptions about dependencies installed by agents. It emphasizes the importance of verifying the actual installation process rather than relying solely on chat logs.\n\nFact 2: The script provided in the article, named verify-install.sh, is intended as a checklist template for verifying installation details before and after an agent's actions. It compares file hashes and import results to detect discrepancies.\n\nFact 3: Myth 1 suggests that seeing a successful \"Done\" message from the agent, such as pip install pydantic, does not necessarily mean the package was properly installed. The article instructs readers to check the output of pip show and a direct import to confirm the installation.\n\nFact 4: Myth 2 highlights the discrepancy between package names on PyPI and the actual import names on a specific host. The article advises collecting metadata for both the installed package and the imported module to distinguish between them, using commands like pip show and importlib.util.find_spec.\n\nFact 5: Myth 3 points out that a successful pip install may not necessarily update the lockfile, which can lead to inconsistencies between the installed dependencies and the specified versions in the lockfile. The article demonstrates how to compare lockfile hashes before and after an installation to detect any changes.",
  "summary": "Did the agent actually install that package? The chat says yes. The next import says no. I keep seeing this exact gap. The log looks green. The environment is not. This FAQ is not a model-IQ rant. It is a state problem. Files versus sentences. Why this keeps biting people Agent loops narrate work in English. Package managers speak exit codes and hashes. We mix those two languages constantly. Then…",
  "key_points": [
    "The article debunks myths about dependencies installed by agents",
    "verify-install.sh script compares file hashes and import results for discrepancies",
    "Myth 1: Successful \"Done\" message doesn't guarantee proper package installation"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}