If you observe a large number of false positives, you may need to add extra entry points to identify hidden dependencies caused by the use of a particular framework or technique, or to identify library project entry points. Please refer to the Semmle documentation for more information on how to do this.