Useless AI generated security reports are frustrating open-source maintainers