DRY up a bit.

While this code is more complex, it doesn't duplicate logic from
Bundler::Audit::Advisory.