[FEATURE] Show only vulnerable dependencies by default

[DarthHater]

• What are you trying to do?

From user testing, we heard that it would be nice to only show vulnerable dependencies found, which is similar to how bundler-audit and other tools function.

• What feature or behavior is this required for?

This just makes the tool more like other unix tooling, giving only actionable information to someone

• How could we solve this issue? (Not knowing is okay!)

It still makes sense to have a mode that outputs the non vulnerable dependencies, I would introduce a flag like --loud where you can get the full output!

In the other tools, we also grouped the dependencies such that it was:

Non Vulnerable Dependencies

....list

Vulnerable Dependencies

....list

SUMMARY TABLE

I think it makes sense to do the same thing here!

• Anything else?

Have a blast! Hit me up if you need any questions answered!

cc @bhamail / @DarthHater / @brittanybelle / @gmohre

[gmohre]

#33