security:check on post install/update

Check known vulnerabilites by checking composer.lock