Component vulnerability check

Matches your own dependency list against an advisory database by version range: it accepts "name version" lines or a JSON component list, compares versions including pre-releases, and shows which advisories affect exactly these versions and which version fixes them. The bundled database is an example for verification, not a live data feed.