Composer security review.

Check the dependencies in composer.lock for known vulnerabilities.
Merge pull request #11 from sjparkinson/feature/composer-lock-security-review

Composer lock review for known vulnerabilities