update the composer.json

[lsmith77]

fix the package name, description, license etc. also make sure that ideally there are only specific versions or branches used. make sure that custom branches have been merged upstream etc.

[ghost]

:+1:

This is something I do for all apps I build.

[winzou]

Can you write a proposal for it? Thanks!

[jjsaunier]

We also can add a security check on composer.lock. It's a service provided by sensioLabs who collect vulnerabilites inside your dependencies and you will be warn of discovered.

Few links :

• https://security.sensiolabs.org
• https://github.com/sensiolabs/security-checker

[Filoz]

:+1: for @lsmith77 and @ProPheT777 suggestions