Hmm... that's a hard external dependency. I wonder if we should:

 * move the check to `SecurityChecker` repo ?
 * add `suggest` to composer.json ?