Dependencies may end up containing "<" or ">" due to build profiles.
This is very much not the way I prefer to programmatically output HTML, but rewriting debcheck to use a template-based approach would be a rather larger change.
Based loosely on a partial patch from Chris Lamb.
Closes: #872646