pip-audit: scanning Python environments for packages with known vulnerabilities