Encourage all sites to use drush pm:security-php to help sites detect insecure libraries

The Needs Review Queue Bot → tested this issue. It either no longer applies to Drupal core, or fails the Drupal core commit checks. Therefore, this issue status is now "Needs work".

Apart from a re-roll or rebase, this issue may need more work to address feedback in the issue or MR comments. To progress an issue, incorporate this feedback as part of the process of updating the issue. This helps other contributors to know what is outstanding.

Consult the Drupal Contributor Guide → to find step-by-step guides for working with issues.

Using Drush for this is now obsolete, we can now use composer audit: ✨ Implement “list security advisories” Packagist/Composer API Fixed

Thanks for sharing @prudloff, I added it to the ddev report - Report with custom DDEV command → example.