Add fields regarding component and affected versions

[dsseng]

i think it's at least beneficial for the developers to have two fields, like the name of the package and affected versions, CVE numbers are hard to read

Originally posted by @frezbo in #5 (comment)