> Perhaps the best way forward is to remove all of the repositories that > have been added to the tool, and see if any projects approach us to add > their repos back. >
FWIW, I found this useful and had opened a PR against Cassandra ( https://issues.apache.org/jira/projects/CASSANDRA/issues/CASSANDRA-16899 ) to address a number of findings from the tool, and was disappointed this morning to find out that the tool isn't tracking cassandra anymore. I'll try to get Cassandra PMC consensus to continue scanning going forward.