Composer 2.9 Blocks Vulnerable Package Installs by Default | Hacker News Reader