@Beggarmidas @bagder Other scanners are based on facts. They actually run curl's code and observe its behavior, or statically analyze the code, i.e. read it and report patterns that are known to be potential sources of problems.
With "AI" on the other hand, everything is fuzzy, everything is statistical probability. It can't reason, it can't observe, it can't really analyze things because it doesn't know what it's doing. It can only output stuff that sounds plausible, whether it's right or not.