added security-checker for composer install and update cmd