False positives due to following development dependencies

Example: https://crates.io/crates/chan is flagged for issues in OpenSSL and Hyper, but those are development-only dependencies and are not actually used in the release binary.

This is observed with workaround for issue #3 (closed) already in place.