composer audit || true npm audit --omit=dev || true