Anthropic stated that its OSS Scanner reports are delivered directly to open-source maintainers without human review, meaning some reports may contain errors such as incorrect severity ratings