Look for .xml files with <!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) ... elements and detect any package import statements (e.g. Python import, R library, or Node.js require) in any elements matching:
code[specific-use=cell] > named-content > alternatives > code
fig[fig-type=repro-fig] > alternatives > code