Would there be interest in a rule that checks if there is a depends on on certain resources?
Eg: for azurerm_monitor_scheduled_query_rules_alert it's a good idea to have a depends on on the resource that is publishing the logs eg a diagnostic setting.
This way, if you delete the diagnostic setting, you are also triggered to remove an alert that won't trigger any more since the data is no longer published.
Same for keyvault secrets/keys/certificates you probably need a depends on a rbac rule so you can actually create the secret/key/certificate.