Conflict between vulnerabilities in scorecard vs check

[james-smith-uk]

• When analysing spacy@3.7.4 the OpenSSF scorecard result returns 21 existing vulnerabilities including critical vulnerabilities.
• The action summary however states: "Dependency review did not detect any vulnerable packages with severity level "low" or higher."