Integrations with oysteR

[dgkf]

Thanks @csgillespie for reaching out at useR! - This looks like a really cool package to integrate with.

oysteR looks like an awesome resource for identifying security vulnerabilities in packages. From a brief readthrough, it looks like it compares a package against the Sonatype OSS Index, identifying known vulnerabilities.

---

Please refer to #209 to help consider how package integrations should be managed

[csgillespie]

After our slack chat, I realised that the current functions in {oysteR} rely on the pkg being installed, which is a little silly. So that needs to be fixed first (quite easy).

[dgkf]

Not a problem - some of our metrics also hinge on having the package installed (R CMD check, coverage), but each of those manage installation themselves. It would definitely streamline things if it's not a prerequisite.

[dgkf]

Wanted to link to this interesting approach over in r-universe-org/help#355

This might offer a more tool-agnostic solution so that we can add a metric that only requires an API call.