Generalized state install CVE report.

[mitchell-as]

DX-3186 When installing one package CVEs tested for one more package

Accurately listing all package names being checked would often result in a horrendously long notice.

Also, now that state install allows multiple arguments, singular "Dependency" is not good grammar.

Sample:

% state checkout qam/newpub#56a04c65-3279-43af-987a-54f371a8302d
Checking out project: qam/newpub

• Resolving Dependencies ✔ Done

  Setting up the following dependencies:
  ├─ [email protected] (7 sub-dependencies)
  ├─ [email protected] (5 sub-dependencies)
  └─ [email protected] (27 sub-dependencies)

• Checking for vulnerabilities (CVEs) x Unsafe

  Warning: Found 4 known vulnerabilities (CVEs)

  • 3 High: CVE-2024-6232, CVE-2024-7592, CVE-2023-36632
  • 1 Medium: CVE-2023-27043

  For more information on these vulnerabilities run 'state security open <ID>'.
  To disable prompting for vulnerabilities run 'state config set 
  security.prompt.enabled false'.

% state install django
█ Installing Package

Operating on project qam/newpub, located at /path/to/newpub.

• Searching for packages in the ActiveState Catalog ✔ Found
• Resolving Dependencies ✔ Done

  Installing [email protected] includes 2 direct dependencies, and 1 indirect 
  dependencies.
  ├─ [email protected] (1 dependencies)
  └─ [email protected]

• Checking for vulnerabilities (CVEs) ✔ Safe

Warning: Skipping runtime sourcing since optin.unstable.async_runtime is 
enabled. Please run 'state refresh' to manually source the runtime.

Added: language/python/django@Auto

Your local project has been updated.
Run state push to save changes to the platform.