Don't print 'Unpatched versions found' if only insecure sources

This is a minor change to remove the unpatched version message if bundler-audit only finds insecure sources.