Detection failure

Hello, I'm not sure I actually using `cabal-audit` correctly, because I have created a [vulnerable repository](https://github.com/blackheaven/vulnerable-sandbox), and when I run the `nix` command from the README, I have no error display (while I expect `base` and `aeson`). Is there something more to do?