Again and again, demanding work from dozens or hundreds or thousands of unaffected dependents instead of fixing vulnerability scanners does not scale, and is a serious open source sustainability issue. https://github.com/FiloSottile/age/issues/744 (do NOT dogpile on the reporter, call your vuln scanner vendor instead)