Roave Security Advisories is a composer package that will ensure your dependencies do not have security vulnerabilities.
The checks are only executed when adding a new dependency via composer require or when running composer update: deploying an application with a valid composer.lock and via composer install won’t trigger any security versions checking.
This is a simple way of staying safe!
