* only active if profile dependency check is active * added suppresion.xml for false positives * added tmp fix for jwt lib