I agree - this feels more like a policy decision and hence the kind of thing that should be in check-syntax and not cve_lib itself.
I agree - this feels more like a policy decision and hence the kind of thing that should be in check-syntax and not cve_lib itself.