Merge pull request #144 from wp-cli/fix/composer-security-fix

Only allow secure Composer versions

Author: schlessera

composer.json

@@ -13,7 +13,7 @@
     ],
     "require": {
         "ext-json": "*",
-        "composer/composer": ">=1.2.0 <1.7.0 || ^1.7.1 || ^2.0.0",
+        "composer/composer": "^1.10.23 || ^2.1.9",
         "wp-cli/wp-cli": "^2.5"
     },
     "require-dev": {