Fix repo time comparison

Resolves #48 -- issue where stale vendored vuln DB  would be preferred to newer user-cached version.