Added bold text to package and color to CVE only.

[joshuachp]

Clean up and reverted to first commit.

Formatted the output like Package {pkg} is affected by {severity} {issues}. with the pkg in bold and the severity and issue colored.

[ilpianista]

There was no need to close the previous PR #36.

This has the same problem I wrote in #36 (comment)

[joshuachp]

I created a new branch to integrate the other merge and start fresh.

I like the bold text, but I don't like to have the CVEs listed after the risk score. Mainly because you can have multiple CVEs affecting one package and the risk score isn't related to all of them, but to the riskier.

If there is only one CVE the color should be correct. If there is more than one I think the highest color is more relevant. It is also the current implementation. I just wanted to make a simple change from the full colored line. If it doesn't fit it doesn't matter.

[ilpianista]

Then, please don't color the CVEs at all and put the risk back to the end.

[joshuachp]

Pushed the changes.