Flushed out the README.
Added advisories from bundler-audit.

* https://github.com/postmodern/bundler-audit