Fails when mix hex.audit reports a security advisory or a retired package in the
library's mix.lock or in examples/mix.lock that audit/advisories_allowlist.exs does
not allow, or when an allowlist entry is malformed or stale (Visualize.Audit.Advisories,
D-207). Both projects need their dependencies fetched.
mix vis.advisories