changes to security, composer, and kernel