I lost all respect for those scanners after I found one was flagging libraries (even the latest) because it had an open ended version range. Upon digging into w

I lost all respect for those scanners after I found one was flagging libraries (even the latest) because it had an open ended version range. Upon digging into why it was because "the library has an insecure mode in it" and the warning will remain until the library authors remove that mode. Here's a better idea, how about you flag when I actually use the mode? If I don't use it, don't flag and let me get on with my real job. To top off the scanner didn't support suppressing single vulnerabilities so our options were (1) the build remained "unstable" forever or (2) we ignore the scanning result so we can get back to a stable build.