2014-08-06 UTC
# 
jonnybarnes barnabywalters: from a securoty point of view, would it be ok to run compouser update on a local maching and verify the tag locally, then check the composer.lock file into version control, deploy to production and run composer install