[andrewryno]

A great example is: https://github.com/andresriancho/w3af-moth

He deliberately wrote vulnerable code to test his auditing script. There are more repos like this.

[ircmaxell]

That's fair. But that's also the vast minority of these results that I can tell...