https://bugzilla.redhat.com/show_bug.cgi?id=2105075
--- Comment #13 from Parag Nemade pnemade@redhat.com --- (In reply to Tomas Hoger from comment #8)
In reply to comment #2:
Why have you CC'ed many people or to exact i18n-bugs list to this bug?
i18n-bugs is on the initial CC list for the cldr-emoji-annotation component, which was added as possibly affected by this issue. The package is considered to include moment because of moment being listed in tools/cldr-apps/js/package-lock.json (in sources). However, moment does not seem to be included in the srpm and also in any binary rpm, hence this looks like false positive.
Thank you for confirming this false positive.