The move from riskreports to val.report I might have messed something as `R CMD check` fails on the CI.