Yes, that is correct per the message:
Issues might occur when [open_basedir] is enabled. Work with your server admin to disable this value in the php.ini file if you’re having issues building a package
Also, note that the scanner states the following:
Scan checks are not required to pass, however, they could cause issues on some systems. Please review the details for each section by clicking on the detail title.
Scan checks are not required they are simply notices should users run into issues with a build.
The plugin doesn’t access outside of the users WP site. It simply reads the WP var ABSPATH which returns the path at which the WP site is hosted.
Are you having troubles creating a package?