RetireJS: Allow to exclude based on library name and version

This is actually a feature request, not a bug. Maven dependencies can be filtered using their Maven coordinates like this:

```

org.jamwiki:jamwiki:jar:0.8.1

```

With RetireJS, this seems to be possible only based on file contents. However, a vulnerability is reported with concrete library name and version such as:

```
One or more dependencies were identified with known vulnerabilities in ext-com-ckeditor:

ckeditor.js (pkg:javascript/ckeditor@4.17.1) : CVE-2022-24728
```

I'm searching for a simple possibility to exclude such a concrete vulnerability report from the results (because I filed a ticket to upgrade the dependency and want to have a green build again).

The configuration should look similar to:

```

ckeditor@4.17.1

```