diff --git a/.nvd/config.json b/.nvd/config.json
deleted file mode 100644
index 03177f3e..00000000
--- a/.nvd/config.json
+++ /dev/null
@@ -1,3 +0,0 @@
-{
-  "nvd": {"suppression-file": ".nvd/suppression.xml"}
-}
diff --git a/.nvd/suppression.xml b/.nvd/suppression.xml
deleted file mode 100644
index 6bae67cf..00000000
--- a/.nvd/suppression.xml
+++ /dev/null
@@ -1,29 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
-    <!-- This CVE affects a single version of Postgres Server itself, not the driver at all and cannot be patched in this project -->
-    <suppress base="true">
-        <notes><![CDATA[
-        FP per issue #5899
-        ]]></notes>
-        <packageUrl regex="true">^pkg:maven/org\.postgresql/postgresql@.*$</packageUrl>
-        <cpe>cpe:/a:postgresql:postgresql_jdbc_driver</cpe>
-        <cve>CVE-2020-21469</cve>
-    </suppress>
-    <!-- This CVE does affect Clojure before 1.9.0, but all other flags are false positives -->
-    <suppress>
-        <notes><![CDATA[
-            all packages except for org.clojure/clojure
-        ]]></notes>
-        <packageUrl regex="true">^pkg:maven\/(?!org\.clojure\/clojure).*$</packageUrl>
-        <cpe>cpe:/a:clojure:clojure</cpe>
-        <cve>CVE-2017-20189</cve>
-    </suppress>
-    <!-- TODO: Remove suppression once we update to Jetty 12 -->
-    <suppress>
-        <notes><![CDATA[
-        file names: [jetty-http|http2-common|http2-server|jetty-io|jetty-server|websocket-client|websocket-server]-9.4.54.v20240208.jar
-        ]]></notes>
-        <packageUrl regex="true">^pkg:maven/org\.eclipse\.jetty.*$</packageUrl>
-        <vulnerabilityName>CVE-2024-6763</vulnerabilityName>
-    </suppress>
-</suppressions>