Don't override the classpath when deserializing a ScanResult
from JSON -- just use the classpath of the caller. (This will produce fewer surprises than overriding the classpath, although be aware that the contents of the ScanResult
may not match the classes available in the classpath after deserialization.) (#431, thanks to @fluxroot)