Merge pull request #1 from magento-ogre/MAGETWO-49572-composer-vulnerability

MAGETWO-49572: Vulnerable package found (composer/composer (1.0.0-alpha10))

Author: Kopylova,Olga(okopylova)

composer.json

@@ -2,14 +2,14 @@
   "name": "magento/composer",
   "description": "Magento composer library helps to instantiate Composer application and run composer commands.",
   "type": "library",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "license": [
     "OSL-3.0",
     "AFL-3.0"
   ],
   "require": {
     "php": "~5.5.0|~5.6.0|~7.0.0",
-    "composer/composer": "1.0.0-alpha10",
+    "composer/composer": "1.0.0-beta1",
     "symfony/console": "~2.3 <2.7"
   },
   "require-dev": {

src/InfoCommand.php

@@ -53,10 +53,12 @@ public function __construct(MagentoComposerApplication $magentoComposerApplicati
      */
     public function run($package, $installed = false)
     {
+        $showAllPackages = !$installed;
         $commandParameters = [
             'command' => 'info',
             'package' => $package,
-            '-i' => $installed
+            '-i' => $installed,
+            '--all' => $showAllPackages,
         ];
 
         $result = [];