Output vulnerable packages to stderr

[adiroiban]

Description

This is a feature request.

It would be nice that when running in CI mode, safety can output the errors to stderr. In this way, it would be easier to highlight them in the whole CI output.

I see that the current design for formatter/reported does not make it easy to make the distinction between the normal banner and extra formatting and the actual error report.

So at this point, I don't know if it make sense to redesign, but I just wanted to report this so that in the case there is a redesign for this part of the code you can consider making this type of filtering easier :)

Thanks for the nice tool!

[rafaelpivato]

Well done looking into Safety reporters. At this moment we have merged some code changes that will print warning messages and errors to stderr. Reports themselves are not actual errors, so they get not written to stderr. What we could have is some special kind of reporter writing vulnerable packages to stdout.

Maybe some ci-reporter that would dump verified packages to stdout and vulnerables to stderr.