We scan our own code, but not 3rd party code. But 90% of the lines of code are from 3rd party components. @joshcorman