Dependencies should not have "system" scope

Hey there.

I’ve moved your post to the section on reporting false-postiives/false-negatives.

It would be useful if you could provide a pom.xml file where you expect the issue to be raised, but it is no longer.