Consider using sensiolabs/security-checker instead of roave/security-advisories.

security-advisories blocks installation in certain cases, leading people to remove it, thus losing protection in the cases where they could benefit from it.

security-checker is less intrusive, showing a warning instead of blocking the install.