We're using this for our multiple repository/CVE reporting. It's ok, we were paying Snyk.io $25k essentially for the same thing.