Problem

The task

`uv audit` reports known vulnerabilities but does not surface adverse project statuses from package indexes that implement PEP 792 status markers. Users can audit an environment and be told “no known vulnerabilities” even when installed packages are flagged by the index as `archived`, `deprecated`, or `quarantined`.