That's about as useless an answer as possible.

Basically it's a false positive report. Probably not a lot we can do without trying to contact each vendor and asking them to do a manual review. Kind of a pain.