Make vuxml the default source for pkg audit