In reply to Daniel Scott.

"Reported" in this sense means those that Patchstack checks, validates, and reports to the public, not reported in the sense that someone submitted it as a potential issue. I'm guessing there are far more of those. All 1,182 should be valid.