Re: Incorporating known-vulnerable JAR scanning into RHQ