@Ryan Hellyer - I've seen those discussions. I guess that's why it hasn't been done yet already, it's a bad idea. At the same time, if even half of what I saw during the scanner demo today was accurate, it's a depressing state of affairs for plugin security on the WordPress.org repository. I mean, we assumed that the repo contained all sorts of plugins rife with insecure code but to have one plugin with over 150 SQL injection points is shocking to me, even without knowing much about security.