composer.lock vulnerability scanner.