Scorecard currently has two identical implementations of the Remediation struct. We should discuss a plan for merging these together.