Adds scripts to composer.json to secure the vendor directory

Signed-off-by: Jon Stovell <[email protected]>

Author: Sesquipedalian

composer.json

@@ -20,7 +20,9 @@
 	},
 	"scripts": {
 		"lint": "php-cs-fixer --quiet check --config .php-cs-fixer.dist.php --path-mode=intersection $(git diff --name-only \"*.php\") --allow-risky=yes || php-cs-fixer check --diff --config .php-cs-fixer.dist.php --path-mode=intersection $(git diff --name-only \"*.php\") --allow-risky=yes",
-		"lint-fix": "php-cs-fixer fix -v --config .php-cs-fixer.dist.php --path-mode=intersection $(git diff --name-only \"*.php\") --allow-risky=yes"
+		"lint-fix": "php-cs-fixer fix -v --config .php-cs-fixer.dist.php --path-mode=intersection $(git diff --name-only \"*.php\") --allow-risky=yes",
+		"post-install-cmd": "php ./vendor/simplemachines/build-tools/secure-vendor-dir.php",
+		"post-update-cmd": "php ./vendor/simplemachines/build-tools/secure-vendor-dir.php"
 	},
 	"config": {
 		"platform": {