Commit

It's saturday so obviously I'm applying patches/workarounds to Packagist servers for the latest CVE, and hardening other stuff while I'm at it. I really hope the pace of all this calms down eventually 🫩