Create an internal API for reporting security issues

[ESultanik]

Some package managers like npm are able to report on known security issues using its own vulnerability database. Provide an internal API for having package classifiers report these along side the results from cvedb. See #18.