[Feature Request] Add composer audit

[fufroma]

We could add composer audit to the CI

The feedback is interesting :

$ composer audit 
Loading "robloach/component-installer" which is a legacy composer-installer built for Composer 1.x, it is likely to cause issues as you are running Composer 2.x.
No security vulnerability advisories found.
Found 5 abandoned packages:
+------------------------------+----------------------------------------------------------------------------------+
| Abandoned Package            | Suggested Replacement                                                            |
+------------------------------+----------------------------------------------------------------------------------+
| nabil1337/case-helper        | marcusball/case-helper                                                           |
| narrowspark/http-emitter     | none                                                                             |
| openid/php-openid            | none                                                                             |
| robloach/component-installer | oomphinc/composer-installers-extender                                            |
| tightenco/collect            | illuminate/collections                                                           |
+------------------------------+----------------------------------------------------------------------------------+

It could alert us on deprecated dependency and especially about CVE on those dependency.