The OpenSSF Scorecard project uses osv-scanner as a library, specifically osvscanner.DoScan. I experimented briefly with the migration to v2 recently and started getting a flood of logs to our stderr which are originating from osv-scanner.

2025/07/16 11:03:49 INFO Scanning dir <...>
2025/07/16 11:04:15 ERROR Error during extraction: (extracting as java/pomxmlnet) failed resolving
2025/07/16 11:04:39 INFO Scanned <...>/package-lock.json file and found 1568 packages

Is there anyway to introduce a control to disable cmdlogger's output? It seems most of the codebase uses cmdlogger.Info (and friends), which write to the default (global) slog handler.

I can set the slog default to something which would ignore it, like slog.DiscardHandler, but this would break many of our own logging.