PHP static code analysis vs. ~1000 top WP plugins = 103 vulnerable plugins found

I don't believe 90% of the top 1000 WP plugins don't have vulnerabilities, so this doesn't feel like a great result for static analysis.