Activate composer audit by default (instead of roave security advisories)

Activate composer audit by default (instead of roave security advisories) #40