Thanks for joining in @Ian Littman. We're definitely not PHP wizards but like Chris said we are able to scan Composer manifests and show all known CVEs