How to quickly check which packages have vulnerabilities in composer.json?

Question

PHP

What tools are available to find such problems?
Found only two tools.
This one is still working, but not convenient https://github.com/Roave/SecurityAdvisories
This one is no longer supported https://github.com/sensiolabs/security-checker

Answer 1

Locally, you can do the check as described here .
But since vulnerability checking should be an ongoing process, it's better to use either the roave/security-advisories you mentioned or, if your project is on GitHub, then through the GitHub action .
Ultimately, all of these options rely on the same source of information.