I'd like to bump this. I get wanting to not build them by default. It's still valid and useful content though and I think makes sense to have available as an advanced off-by-default developer-enabled feature. So I did just that: https://github.com/ComplianceAsCode/content/pull/4923
. Consequently the PR was promptly closed within about 20m by one of the maintainers with nothing more than a "Nope, not gonna do that", which, tbh, seemed like a fairly hostile way to interact with contributors. No discussion or explanation, just a sprinkling of nist references that don't actually have to do with the specific issue. The content generation used the enable_derivatives script which already peppers the XCCDF with applicable warnings.