Drupal Security Warning for Composer