Abstract the fetching to handle all errors/requests/sessions

IMHO the whole fetching should be abstracted in a function that hides requests/sessions/statsus code and processes all errors. This can be in another PR though

_Originally posted by @pombredanne in https://github.com/nexB/vulnerablecode/pull/719#discussion_r872578804_