Constraints should be joined with a disjunction
Each advisory contains multiple branch constraints
Using actual security-advisories repo URI
Authors is an array, not a hashmap
Minor CS (spacing)
Removing "composer://" prefix from reference names
s/conflicts/conflict
`build` dir should be ignored
Build tool has its own `vendor` to be gitignored
Build tool dependencies
Adding validation steps to verify that the generated `composer.json` complies with latest composer validator
Refactoring composer file validation to reduce call-time contextual knowledge
Logic to commit the generated `composer.json` file
Committing generated `composer.json`