Include advisories in package response

Currently in order to get any known advisories for a specific package you have to first look up the package to identify all known package versions there request the data for each version to get the advisory keys. It would be nice to be able to get all keys for all versions within the response for the package.