This adds support for the new report syntax to DS. We add support by
wrapping the old simple array in a hash within a `vulnerabilities` key.