pin sensiolabs/security-checker to 1.1