npm audit fix for composer

In recent weeks we had a lot of packages to update. Updates are necessary, but dangerous. Every single update can be hit by a Supply Chain…