Down to 3 open issues, two of which are from CPAN: https://rt.cpan.org/Ticket/Display.html?id=105415 Scalar-List-Util https://rt.cpan.org/Ticket/Display.html?id=105416 IPC-SysV and one of which is the use of insecure tmpnam() in the POSIX ext, this use has been deprecated and is eventually to be removed. Both the CPAN issues have patches, the patch in 105415 has even been applied, but both would need new releases. Thanks a lot to various people I have pestered off-list on various Coverity grumblings. Their analysis has been added to the Coverity tickets, for posterity.