Limited automated testing was added to meet shipping deadlines. When more time is available, add more tests.

Scenarios:

• Project where restore does not report any vulnerable packages
• Project where there is a direct package with a vulnerability
• Multi-targeting project where there is a transitive package with a vulnerability for all TFMs
• Multi-targeting project where there is a transitive package with a vulnerability for one TFM