Number of CVE entries in a plugin

Hello list,

I was trying out some NASL-scripts I've made to test some NASL features
and I encountered the following nessusd error message:

nessus-libraries/libnessus/store.c: <path_to_plugin> has a too long
cve_id (142)

I looked at the Nessus source code to find out how this value is
determined and what the maximum number of CVE IDs is. I noticed that the
space reserved for storing CVE IDs is limited to 128 Bytes. So a quick
calculation let to the conclusion that a maximum number of 8 CVE IDs is
allowed. I've increased this value to see if this would allow for more
CVE IDs, so far this seems to work. However, I do have some questions
about the CVE support in Nessus:

First of all, how safe is it to alter the array size of the cve_id
variable in the plugin struct (store.h). Does this in any way break
other parts in the Nessus code?

I was also wondering whether a maximum of 8 CVE IDs is enough. Consider
for example the MS DCOM plugins, it appears that at the moment a lot of
security researcher are looking at MS DCOM implementation. It is likely
that more vulnerabilities will be found in this interface, all with
their own CVE/CAN ID. Or maybe the plugin that checks for overflows in
POP3 servers, it already has 5 CVE IDs and 11 BIDs. Maybe it would be
better if this value is at least twice the size as it is now (a mean 16
is a lot).

Regards,
Yorick