This tool detects vulnerabilities in composer dependencies https://github.com/sensiolabs/security-checker