Allow suppress of an alarm

[hidden-dimensions]

As we see sometime npm audit report a vulnerability but there is no fix yet, without a fix this will fail a CI check thus block the PR. We shall allow suppress of individual alarm, but let the author aware that:

1. should create an issue on github and remove the suppressed alarm when a fix is ready.
2. list out what is suppressed when running the checker.