* Try different approach to echo newlines (may not work)
* Add review msg if at least one vulnerable package.json exists