Code scanning alerts at python-social-auth were activated months ago, and now we finally got to zero alerts. Most of them have been fixed, but few were dismissed, as some third-party services still rely on MD5 in their API in 2025. This is now properly documented in our code.
