David Coster

Fixed in a commit to code_scanning_alerts

@wedeling -- should this be fixed and merged? Or discarded? Work on this started more than 3 years ago ...

@wedeling -- this seems to be waiting for your approval ...

As part of this cleanup we should probably also look at the security report: https://github.com/UCL-CCS/EasyVVUQ/security