When upgrading SPFx projects, only one occurrence of each finding is reported. For example, if you have a project with two web parts and both their manifests require updating, only one manifest will be reported.