add NEWS parsing to risk report
refactored virtual repo stuff so that we can use a data.frame or sessionInfo to define set of pkgs