The AFC framework is a set of libraries and dependencies that our plugins use and share. Instead of following the legacy approach of bundling the dependencies with each plugin, potentially carrying around multiple copies of them, in different versions, we extracted them into an external module, in the form of the AFC framework, which contains all of them. The “client” plugins then load the ones they need.
Our standard design involves distributing the AFC framework as a separate, standalone plugin, so that there is only one copy of it in each installation. This was the case with the EU VAT Assistant as well, and it worked well for years, until someone at WordPress asked us to change the design and bundle the framework directly within the plugin. Still, he bundled AFC framework is still the same one used by all our plugins, therefore it contains all the files as well. Their mere presence won’t cause issues.
We didn’t plan to design a “light” version of the framework for the EU VAT Assistant, both because the framework was always meant to exist in a single version. Also, the EU VAT Assistant is reaching its end of life (see announcement from January 2022), and we opted not to make radical changes at this point, when the code is in maintenance mode.
Version 2.0.28.220224 of the EU VAT Assistant, with the updated Freemius library, is now available. We’re not familiar with the WP Scan site, therefore we wouldn’t be able to say when they will update their listing. If they run a scan periodically, they should be able to detect the change soon.