Mark a package as vulnerable or EOL

[fricklerhandwerk]

As a security team member or package maintainer, I want to

• Update a package's source with a reference to a security record in knownVulnerabilities
• Update a package's source to mark it end-of-life (EOL)

Depends on:

• #7