[Feature] Package names in summary audit report

Hi, I think it would be useful to include a summary of affected packages in the audit report much like how yarn audit displays it. My issue is the audit summary displays too little information, but the full report displays too much. Thank you for considering, and more than happy to put in a PR if needed.

[quinnturner]

Note that I revised the potential approach in a new comment: https://github.com/IBM/audit-ci/pull/74#issuecomment-479696523

Exerpt:

One alternative that I am interested in as well would be adding the flag --report-type {summary, important, full}. This set up could support different report types in the future. I suggest we would default to important, which is the behaviour in the current PR. We would continue by deprecating the existing --summary and --report flags but continue to support them for “a while”, piping them to the associated --report-type (summary --> summary and report --> full) and console.warn the deprecation and potential future removal.

This approach would be a major bump to the version and would include documentation in the README for upgrading an upgrading strategy.

Open to discussion and preferences!

[quinnturner]

I have released v2.0.0 which addresses this issue by adding the --report-type option; which defaults to a new setting important. important shows the audit summary as well as relevant vulnerabilities instead of the full audit report or no relevant vulnerabilities. For now, I will close this. I see the value of adding a different way of formatting the output, but the original issue of adding package names in the summary audit report has been addressed. Feel free to open another issue for formatting the output if you feel that it would provide significant value.