Fix composer vendor with analyze sources
Improve analyze: add CLI command, add checking framework, fixes