@bruces I've been using Opus to look at an OSS project I work on (something like a couple million lines of code, almost three decades old), and it's finding a large number of issues. At least half the stuff it finds is legitimately a security issue, but quite low-grade issues. Stuff that would require some kind of elevated access to already exist to take advantage of it. We'll fix them, because it's noise for future scans with LLMs, but it's not something we're urgently rushing out to users.