https://ashallendesign-uk.medium.com/preventing-installing-composer-dependencies-with-known-security-vulnerabilities-3bd8221c6c34