If/when we have a security issue I think we should update the FriendsOfPHP Security Advisory Database located at https://github.com/FriendsOfPHP/security-advisories
This will let people know on https://security.sensiolabs.org/check that they need to update. I'd like to see a lot more of this automated. I found it by looking at OWASP's https://www.owasp.org/index.php/OWASP_Dependency_Check and not seeing a PHP one.