It seems to me that pip-audit doesn’t consider the Python version it runs on when reporting a vulnerability. Would be nice that vulnerabilities that don’t apply to the actively running Python version ...