risk_assess_pkg function

Assess package - simplified