New composer audit
Command and security audits in Composer 2.4
audit
command that lists reported security issues, and automatic warnings when installing a package with known vulnerabilities.