Further to my earlier posting, the following diff may be of use to people running anoncvs mirrors. Its utterly trivial, but the mantra goes, where's the diff, so I thought why not.
Si1entDave --- security Sun Mar 11 01:31:52 2007 +++ security.new Thu Mar 6 13:17:02 2008 @@ -35,7 +35,7 @@ printf("Login %s has non-alphanumeric characters.\n", $1); if (length($1) > 31) printf("Login %s has more than 31 characters.\n", $1); - if ($2 == "") + if ($2 == "" && $1 != "anoncvs") printf("Login %s has no password.\n", $1); if ($2 != "" && length($2) != 13 && ($10 ~ /.*sh$/ || $10 == "") && ($2 !~ /^\$[0-9a-f]+\$/) && ($2 != "skey")) {