We need too explain if a user is finding false postives in an application that is not fully respolvable and then this could be expected.

The reason, is that we can not know what the class is, that is being called and a because of this, we can not determine if it is a valid match or not. When this happens we are defaulting to exposing more information than less. The solutions are

1. Make sure that the maven settings is able to get all the dependencies
2. Make sure the application is fully compilable.