False Positives Everywhere
As a web developer, I've learned to ignore vulnerability scan results and that's a big problem.
Most of the results aren't relevant. Sometimes I find it easy to figure out what's safe to ignore from the findings.
Other times
I find myself scouring documentation, source code, and blog posts only to discover the "RCE" npm audit told me I had
doesn't matter.
