Hi,

Just to let everyone know I've now added support to
security/audit-packages for fetching the pkg-vulnerabilities file over
HTTP.  It's documented in the man page but for the impatient just add
the following to your ${PKG_SYSCONFDIR}/audit-packages.conf file:

FETCH_PROTO="http"

regards,

adrian.