this plugin is for projects using composer in dependency management. it uses "Security Advisories Checker API" (https://security.sensiolabs.org) to check the file composer.lock