This false-positive problem is a major headache for a lot of open-source programming languages and programs, whose source code is also sitting right there on GitHub to be inspected and compared with.

Think that Microsoft could do better with its false-positive review process, particularly doing something more for open-source developers and projects.