Yes it is. They're not not false positives until they're reported and consume maintainer time.