We are pleased to announce the release of Composer 2.9.0, bringing improvements to security, repository management from the CLI, and lots more.
Automatic Security Blocking
Composer now automatically blocks updates to packages with known security advisories. This protection is enabled by default and prevents you from accidentally updating