fix problem if there are no vulnerable apps
introduce debug mode that ignores db and does not mail