We'd like to see if it would be possible to suppress end of life vulnerabilities, with rules, that detect if there is a piece of software on a machine that is known to require that EoL software as a dependency. An example of this would be something like Autodesk 2022, which we know installs VC++ 2013 alongside it. So if Autodesk 2022 software is seen, any VC++ 2013 vulnerabilities is automatically suppressed for that endpoint.

Somewhat of a known-dependency catalog feature to coincide with the above would also be INCREDIBLY nice.