Use OSS Index for vulnerable packages in place of github

[digitalcoyote]

I was looking for a more recently maintained alternative to SafeNuget, and I couldn't find anything close enough. It seems like instead of downloading the file from Github, it could act like DevAudit and Check the packages in use against OSS Index.

[digitalcoyote]

I'm willing to do the work if it's something that would be be considered once I get a Pull Request ready.