We fresh-cloned the top 100 npm packages. The biggest problem we found was in our own tool.

TL;DR We ran CloneProof, a static "will a fresh clone of this repository install and run?"...