When a finding about a sanitiser, validator or authentication check recommends returning or logging the original value on failure, the report says, under that step, to fail closed instead. The finding keeps its rating.
A finding that calls a variable or property dead, quoting it inside its own declaration, is now checked against the code, and set aside with the lines that use it.
Full technical release notes for 7.4.21 are on the changelog, alongside every other Ghost Architect™ Local release.
Ghost Architect™ Local runs on your own hardware.
If you want an evaluation trial, the download page tells you how to get the tarball, verify it, and start the evaluation trial on your own hardware.
Request Ghost Architect™ LocalEJ Wisner, founder of Ghost Architect™. Local pricing is monthly, per team size, with no per-token bill; the numbers are on the pricing page.