lint: 'check-vulnerabilities' also checks package properties.